vendor:
allomani 2007
by:
NeX HackEr
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: allomani 2007
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2007
allomani 2007 <= SQL Injection Vulnerability
An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. This can be done by manipulating the 'cat' parameter in the 'browse' action of the vulnerable application. An attacker can use the UNION operator to combine the results of two or more SELECT statements into a single result set.
Mitigation:
Input validation should be used to prevent SQL injection attacks. The application should also use parameterized queries to prevent SQL injection attacks.
