vendor:
Disc Organization System
by:
SECUPENT
7,5
CVSS
HIGH
SQL Injection and Cross Site Scripting
89 (SQL Injection) and 79 (Cross-site Scripting)
CWE
Product Name: Disc Organization System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2016
DORG – Disc Organization System SQL Injection And Cross Site Scripting
DORG is vulnerable to SQL Injection and Cross Site Scripting. An attacker can inject malicious SQL queries into the vulnerable parameter 'q' in the 'results.php' page. An attacker can also inject malicious JavaScript code into the vulnerable parameter 'q' in the 'results.php' page.
Mitigation:
Input validation should be used to prevent SQL Injection and Cross Site Scripting attacks. Sanitize user input and escape special characters.
