vendor:
DedeCMS
by:
[CWH] | Finded By: Nafsh (Mr.M4st3r, Nafsh, Skote_Vahshat, HijaX)
9.8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: DedeCMS
Affected Version From: All Versions
Affected Version To: All Versions
Patch Exists: NO
Related CWE: N/A
CPE: a:dedecms:dedecms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: PHP
2011
Dede Cms All Versions Sql Vulnerability Exploit
DedeCMS is vulnerable to SQL injection in the 'id' parameter of the 'list.php', 'members.php' and 'book.php' files. An attacker can exploit this vulnerability to gain access to the database and execute arbitrary SQL commands.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Sanitize all user input and use parameterized queries.
