vendor:
Ger Versluis 2000
by:
DeCo017
7,5
CVSS
HIGH
SQL injection
89
CWE
Product Name: Ger Versluis 2000
Affected Version From: Ger Versluis 2000 version 5.5 24
Affected Version To: Ger Versluis 2000 version 5.5 24
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Ger Versluis 2000 version 5.5 24 SITE_fiche.php SQL Injection Vulnerability
A SQL injection vulnerability exists in Ger Versluis 2000 version 5.5 24 SITE_fiche.php. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to sensitive information from the database.
Mitigation:
Developers should always use parameterized queries to prevent SQL injection attacks. Additionally, input validation should be performed to ensure that user-supplied data does not contain malicious SQL code.