vendor:
Custom T-shirt Design
by:
Snakespc
8,8
CVSS
HIGH
SQL Injection & XSS
89, 79
CWE
Product Name: Custom T-shirt Design
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Custom T-shirt Design (SQL & xss) MULTIPLE Remote Sql Injection
A remote SQL injection and XSS vulnerability exists in the 2daybiz.com Custom T-shirt Design script. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. This can allow the attacker to execute arbitrary SQL commands on the underlying database and inject malicious JavaScript code into the application.
Mitigation:
Ensure that user input is properly sanitized and validated before being used in SQL queries. Also, ensure that user input is properly sanitized and validated before being used in the application.
