vendor:
Greetring card
by:
Net.Edit0r
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Greetring card
Affected Version From: 1.1
Affected Version To: 1.1
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux/PHP
2020
Greetring card SQL Injection Vulnerability
Greetring card SQL Injection Vulnerability is a type of web application vulnerability which allows an attacker to inject malicious SQL queries into vulnerable web application. This vulnerability can be exploited by sending malicious SQL queries to the vulnerable web application. The vulnerable web application will then execute the malicious SQL queries and return the results to the attacker.
Mitigation:
To mitigate this vulnerability, input validation should be done on the server side. All user input should be validated and filtered before being used in any SQL query. Additionally, parameterized queries should be used to prevent SQL injection.