vendor:
Article Script
by:
Hussin X
8.8
CVSS
HIGH
Remote SQL Injection
89
CWE
Product Name: Article Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Article Script (view.php v ) Remote SQL Injection Vulnerability
A vulnerability in the view.php file of the Article Script allows an attacker to inject arbitrary SQL commands. An attacker can exploit this issue by manipulating the 'v' parameter in a malicious manner when requesting the vulnerable page. This can allow the attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and possibly compromise the underlying system.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, the application should be configured to use the lowest privileges necessary to perform its function.
