vendor:
Bs Counter
by:
Bgh7
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Bs Counter
Affected Version From: 2.5.2003
Affected Version To: 2.5.2003
Patch Exists: NO
Related CWE: N/A
CPE: 2.5.2003
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Bs Counter 2.5.3 (page) Sql Injection Vuln.
An attacker can inject malicious SQL queries into the 'page' parameter of the 'stats.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The malicious code can be used to read, modify or delete data from the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
