vendor:
OOP CMS BLOG
by:
Mr Winst0n
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: OOP CMS BLOG
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:zsoft:oop_cms_blog
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Kali Linux, Windows 8.1
2019
OOP CMS BLOG 1.0 – SQL Injection
Multiple files in OOP CMS BLOG 1.0 are vulnerable to SQL Injection. These files include search.php, post.php, posts.php, page.php, viewUser.php, and replayMsg.php. All of these files are vulnerable to SQL Injection when an attacker supplies a malicious value for the *id parameter.
Mitigation:
Input validation should be used to prevent SQL Injection attacks. Additionally, parameterized queries should be used to prevent malicious user input from being interpreted as part of the query.
