vendor:
Arcadem Pro
by:
Hussin X
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Arcadem Pro
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Arcadem Pro (articlecat) Remote SQL Injection Vulnerability
A remote SQL injection vulnerability exists in Arcadem Pro (articlecat). An attacker can send a specially crafted HTTP request containing malicious SQL statements to the vulnerable application in order to gain access to unauthorized information or to manipulate data. The malicious SQL statements can be sent to the vulnerable application via the 'articlecat' parameter in the 'loadpage' parameter of the vulnerable application.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, the application should use parameterized queries to prevent SQL injection attacks.
