vendor:
Custom Business Card script
by:
JaMbA
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Custom Business Card script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: 2daybiz.com/custombuss_cardscript.html
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2010
Custom Business Card script SQL injection Vulnerability
A vulnerability exists in the Custom Business Card script, which allows an attacker to inject arbitrary SQL commands. By sending a specially crafted SQL query to the vulnerable script, an attacker can gain access to the application database and potentially compromise the application and all its data.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
