vendor:
KasraCMS
by:
G4N0K
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: KasraCMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
KasraCMS (index.php) Multiple Remote SQL Injection Vulnerabilities
KasraCMS is vulnerable to multiple remote SQL injection vulnerabilities. An attacker can exploit these vulnerabilities by sending malicious SQL queries to the vulnerable application. This can be done by sending a specially crafted HTTP request to the vulnerable application. The attacker can exploit these vulnerabilities to gain access to sensitive information stored in the back-end database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
