vendor:
AJ HYIP
by:
Jose Luis Gongora Fernandez (a.k.a) JosS
8,8
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: AJ HYIP
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: a:ajsquare:aj_hyip
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability
AJ HYIP Meridian is prone to a blind SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this vulnerability to manipulate SQL queries by injecting arbitrary SQL code. This may allow the attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
Mitigation:
Developers should never construct SQL statements based on user input. Instead, parameterized statements should be used.
