vendor:
Classifieds
by:
Stack
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Classifieds
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Carscripts Classifieds Sql INjection
Carscripts Classifieds is prone to a SQL injection vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. The attacker can also execute arbitrary SQL code in the context of the application. This issue affects the 'cat' parameter of the 'index.php' script. This issue is being exploited in the wild.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, the application should use stored procedures to access the database.
