vendor:
Alqatari group Version 1.0
by:
Red-D3v1L
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Alqatari group Version 1.0
Affected Version From: 1
Affected Version To: 5
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Alqatari group Version 1.0 <== 5.0 (id) Remote SQL Injection Vulnerability
An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable application. The malicious request contains an SQL query in the form of a parameter value that is passed to the vulnerable application. This can allow an attacker to gain access to sensitive information stored in the database, such as user credentials, or to modify the data stored in the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being passed to the database. Additionally, parameterized queries should be used to prevent SQL injection attacks.
