vendor:
phpfood_cms
by:
kaMtiEz
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: phpfood_cms
Affected Version From: 2
Affected Version To: 2
Patch Exists: NO
Related CWE: N/A
CPE: a:phpfood:phpfood_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2011
PhpFood CMS (restaurant.php?id=) SQL Injection Vulnerability
PhpFood CMS is vulnerable to SQL Injection. An attacker can exploit this vulnerability to gain access to sensitive information stored in the database. The vulnerable parameter is 'id' which is passed to the 'restaurant.php' script. An attacker can inject malicious SQL queries in the 'id' parameter to gain access to sensitive information stored in the database.
Mitigation:
The vendor has not released any patch to address this vulnerability. As a workaround, it is recommended to restrict access to the vulnerable script.
