vendor:
Number Links 1 php
by:
Hussin X
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Number Links 1 php
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
e-topbiz Number Links 1 php ( id ) Remote SQL Injection Vulnerability
A remote SQL injection vulnerability exists in e-topbiz Number Links 1 php. An attacker can send a specially crafted HTTP request containing malicious SQL statements to the vulnerable application in order to manipulate the database. This can be exploited to gain access to sensitive information or to manipulate certain data.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
