vendor:
emuCMS
by:
TurkishWarriorr
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: emuCMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
emuCMS SQL Injection Vulnerability
This vulnerability allows an attacker to inject malicious SQL queries into the vulnerable application. The attacker can use this vulnerability to gain access to the database and extract sensitive information such as usernames, passwords, emails, etc. The vulnerable parameter is the ‘cat_id’ parameter in the ‘index.php’ page. The attacker can inject malicious SQL queries by using the ‘union’ keyword and the ‘concat’ function.
Mitigation:
The best way to mitigate this vulnerability is to use parameterized queries and input validation. The application should also be tested for SQL injection vulnerabilities.
