vendor:
Etki Video Pro
by:
7.5
CVSS
HIGH
SQL Injection
CWE
Product Name: Etki Video Pro
Affected Version From: Etki Video Pro 2.0
Affected Version To:
Patch Exists: No
Related CWE:
CPE:
Platforms Tested:
Etki Video Pro Multiple SQL Injection Vulnerabilities
The Etki Video Pro application is prone to multiple SQL-injection vulnerabilities due to improper input sanitization before using it in an SQL query. These vulnerabilities can be exploited by attackers to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
Mitigation:
Proper input validation and sanitization techniques should be implemented to prevent SQL-injection attacks. Developers should use parameterized queries or prepared statements to handle user-supplied input safely.