vendor:
Forum
by:
3v0 aka evolution
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Forum
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP Pack 3
2010
Ballettin Forum Multiple SQL Injection Vulnerability
The vulnerability exists due to the lack of proper sanitization of user-supplied input in the 'mesajid' parameter of the 'alinti.php' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database. An attacker can also inject malicious JavaScript code into the 'ballettin' cookie and execute it in the browser of an unsuspecting user.
Mitigation:
Input validation should be used to prevent SQL injection attacks. It is recommended to use parameterized queries (prepared statements) when working with databases.
