header-logo
Suggest Exploit
vendor:
Emlak Scripti
by:
7.5
CVSS
HIGH
Input-Validation
CWE
Product Name: Emlak Scripti
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Netkamp Emlak Scripti Multiple Input-Validation Vulnerabilities

Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to sanitize user-supplied input. A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/25875/info

Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to sanitize user-supplied input.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com.com/script_path/detay.asp?ilan_id=[SQL]

Navigation

Suggest Exploit

Services By CQR