vendor:
DS CMS
by:
Mr.tro0oqy
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: DS CMS
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:digitalspinners:ds_cms:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
DS CMS 1.0 (nFileId) Remote SQL Injection Vulnerability
A remote SQL injection vulnerability exists in DS CMS 1.0. An attacker can send a specially crafted HTTP request to the vulnerable application in order to execute arbitrary SQL commands in the back-end database. This can be exploited to manipulate data, disclose sensitive information, and potentially compromise the system.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, the application should use parameterized queries to prevent SQL injection.
