vendor:
APBoard
by:
secret
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: APBoard
Affected Version From: 2.1.0
Affected Version To: 2.1.0
Patch Exists: N/A
Related CWE: N/A
CPE: a:php-programs.de:apboard:2.1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft OS
2010
APBoard 2.1.0 / board.php?id= SQL Injection
APBoard 2.1.0 / board.php?id= SQL Injection is a vulnerability that allows an attacker to inject malicious SQL code into a vulnerable web application. This can be exploited to gain access to sensitive data stored in the database, or to modify the data stored in the database. The vulnerability is present in versions 2.1.0 and earlier of APBoard. The exploit is triggered by sending a specially crafted HTTP request to the vulnerable web application, containing malicious SQL code. The malicious code is then executed by the web application, allowing the attacker to gain access to sensitive data or modify the data stored in the database.
Mitigation:
To mitigate this vulnerability, ensure that all user input is properly sanitized and validated before being used in any SQL queries.
