header-logo
Suggest Exploit
vendor:
CFMagic Products
by:
Unknown
5.5
CVSS
MEDIUM
Input validation
20
CWE
Product Name: CFMagic Products
Affected Version From: Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: a:cfmagic:magic_book_professional:2.0 cpe:/a:cfmagic:magic_list_professional:2.5 cpe:/a:cfmagic:magic_forum_personal:2.5
Metasploit:
Other Scripts:
Platforms Tested:
2005

Input validation vulnerabilities in CFMagic Products

The CFMagic Products are prone to multiple input validation vulnerabilities. These vulnerabilities allow an attacker to inject malicious SQL code into database queries and conduct cross-site scripting attacks.

Mitigation:

To mitigate these vulnerabilities, it is recommended to implement proper input validation and sanitization techniques.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/15774/info
 
CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input.
 
These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and conduct cross-site scripting attacks.
 
Magic Book Professional version 2.0 and prior, Magic List Professional version 2.5 and prior, and Magic Forum Personal versions 2.5 and prior are vulnerable.
 
Other versions of these applications may also be affected. 

http://www.example.com/view_forum.cfm?ForumID=1[SQL]

Navigation

Suggest Exploit

Services By CQR