vendor:
ePhotos
by:
ajann
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: ePhotos
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: N/A
Related CWE: N/A
CPE: a:enthrallweb:ephotos:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Enthrallweb ePhotos 1.0 (subLevel2.asp) Remote SQL Injection Vulnerability
A remote SQL injection vulnerability exists in Enthrallweb ePhotos 1.0. An attacker can send a specially crafted HTTP request containing malicious SQL statements to the vulnerable application in order to gain access to the underlying database. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code in the affected parameter.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All input data should be validated and filtered before being passed to the underlying database.
