vendor:
Haber Portal
by:
ASIANEAGLE
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Haber Portal
Affected Version From: 3.6
Affected Version To: 3.6
Patch Exists: NO
Related CWE: N/A
CPE: a:muratsoft:haber_portal
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2006
Muratsoft Haber Portal v3.6 (tr) SQL Injection Vulnerability
An attacker can exploit a SQL injection vulnerability in Muratsoft Haber Portal v3.6 (tr) by sending a specially crafted HTTP request to the vulnerable application. By exploiting this vulnerability, an attacker can gain access to the database and execute arbitrary SQL commands.
Mitigation:
Developers should always use parameterized queries, also known as prepared statements, when interacting with the database. Additionally, input validation should be performed to ensure that untrusted data is not being used to construct SQL commands.
