vendor:
MobileShop master
by:
HAZIM ARBAŞ
2.1
CVSS
LOW
SQL Injection
89
CWE
Product Name: MobileShop master
Affected Version From: MobileShop master v1.0
Affected Version To: MobileShop master v1.0
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows 10 Pro
2024
MobileShop master v1.0 – SQL Injection Vulnerability
The MobileShop-master application is vulnerable to SQL Injection through the 'id' parameter in '/MobileShop-master/Details.php'. By exploiting this vulnerability, attackers can gain unauthorized access, manipulate data, and potentially exploit other database vulnerabilities. Prompt action is necessary to mitigate the risk and protect the application and its data.
Mitigation:
To mitigate this vulnerability, input validation should be implemented to sanitize user-supplied data and the use of parameterized queries or prepared statements to prevent SQL Injection attacks.