vendor:
JEmbedAll
by:
Ihsan Sencan
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: JEmbedAll
Affected Version From: 1.4
Affected Version To: 1.4
Patch Exists: NO
Related CWE: N/A
CPE: a:goldengravel:jembedall:1.4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Win7 x64, Kali Linux x64
2017
Joomla! Component JEmbedAll v1.4 – SQL Injection
A SQL injection vulnerability exists in Joomla! Component JEmbedAll v1.4. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. This can allow the attacker to gain access to sensitive information stored in the database, such as user credentials, or to modify the data stored in the database.
Mitigation:
The best way to mitigate SQL injection attacks is to use parameterized queries. This means that instead of building a query by concatenating strings, the query is built using placeholders and the parameters are passed separately. This prevents the attacker from manipulating the query.
