vendor:
Banner Management Script
by:
S.W.A.T.
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Banner Management Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Banner Management Script (tr.php id) Remote SQL Injection Vulnerability
An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. The attacker can inject arbitrary SQL code in the vulnerable parameter 'id' of the 'tr.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. This can be exploited to disclose the content of the database, modify data, execute administration operations and potentially compromise the system.
Mitigation:
The vendor has released an update to address this vulnerability. Users are advised to update to the latest version.
