vendor:
Shop Creator
by:
Pouya_Server
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Shop Creator
Affected Version From: 4.0
Affected Version To: 4.0
Patch Exists: N/A
Related CWE: N/A
CPE: a:etoshop:shop_creator:4.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A
Auth Bypass SQL Injection Vulnerability
An authentication bypass vulnerability exists in Shop Creator 4.0 due to improper validation of user-supplied input. An attacker can exploit this vulnerability to bypass authentication and gain access to the admin page. To exploit this vulnerability, an attacker can use the username 'pouya' and the password ' or '.
Mitigation:
Input validation should be performed to ensure that untrusted data is not used to bypass authentication.
