header-logo
Suggest Exploit
vendor:
Etki Video Pro
by:
7.5
CVSS
HIGH
SQL Injection
CWE
Product Name: Etki Video Pro
Affected Version From: Etki Video Pro 2.0
Affected Version To:
Patch Exists: No
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Etki Video Pro Multiple SQL Injection Vulnerabilities

The Etki Video Pro application is prone to multiple SQL-injection vulnerabilities due to improper input sanitization before using it in an SQL query. These vulnerabilities can be exploited by attackers to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Mitigation:

Proper input validation and sanitization techniques should be implemented to prevent SQL-injection attacks. Developers should use parameterized queries or prepared statements to handle user-supplied input safely.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/47298/info
 
Etki Video Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
Etki Video Pro 2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/kategori.asp?cat=1 [SQL Injection]