vendor:
news.php
by:
ea$y laster
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: news.php
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: Unknown
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: PHP
Unknown
Erotik Auktionshaus SQL Injection news.php exploit
The Erotik Auktionshaus news.php script is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the server, which will then execute the malicious SQL query. This can be used to gain access to sensitive information such as passwords and other confidential data stored in the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.
