vendor:
Categorizator
by:
Wad Deek
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Categorizator
Affected Version From: 0.3.1
Affected Version To: 0.3.1
Patch Exists: NO
Related CWE: N/A
CPE: a:lelogiciellibre:categorizator
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Xampp on Windows7
2016
Categorizator 0.3.1 | SQL Injection
Categorizator 0.3.1 is vulnerable to SQL Injection. An attacker can exploit this vulnerability by sending a crafted HTTP request with malicious SQL statements to the vulnerable application. This can allow the attacker to gain access to sensitive information stored in the database, modify data, execute administration operations on the database, and potentially compromise the underlying system.
Mitigation:
Developers should always sanitize user input and use parameterized queries to prevent SQL injection attacks.
