vendor:
MLM Script
by:
3spi0n
9,3
CVSS
HIGH
SQL Injection & XSS
89, 79
CWE
Product Name: MLM Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2019
MLM (Multi Level Marketing) Script, Multiple Vulnerabilities
The MLM Script is vulnerable to SQL Injection and XSS attacks. An attacker can inject malicious SQL queries into the vulnerable parameters of the application, such as the 'prdid' and 'uid' parameters of the productview.php page, and the 'email' parameter of the regcheck_email.php page. An attacker can also inject malicious JavaScript code into the 'email' parameter of the regcheck_email.php page.
Mitigation:
The application should use parameterized queries to prevent SQL injection attacks. The application should also validate user input to prevent XSS attacks.
