vendor:
AJ Matrix DNA
by:
v3n0m
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: AJ Matrix DNA
Affected Version From: 3.1
Affected Version To: 3.1
Patch Exists: NO
Related CWE: N/A
CPE: a:ajsquare:aj_matrix_dna
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
AJ Matrix v3.1 (id) Multiple SQL Injection Vulnerability
AJ Matrix DNA is the world's leading MLM software solution for all MLM and affiliate programs. It is vulnerable to multiple SQL injection attacks, which can be exploited to extract sensitive information from the database. The exploit involves sending malicious SQL queries to the vulnerable parameter 'id' in the URL. An attacker can use the 'union' operator to combine the results of two or more SELECT statements into a single result set.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Parameterized queries should be used to prevent SQL injection attacks.
