Content Injector V1.53 SQL Injection Vulnerability

vendor:

Content Injector

by:

S.W.A.T.

5.5

CVSS

MEDIUM

SQL Injection

CWE

Product Name: Content Injector

Affected Version From: Content Injector V1.53

Affected Version To: Content Injector V1.53

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2007

The vulnerability allows an attacker to see the admin user and MD5 password, which can be cracked.

Implement proper input validation and parameterized queries to prevent SQL injection attacks.

Source