vendor:
PayPal Shop Digital
by:
DeadLy DeMon
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: PayPal Shop Digital
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP 3 and Backtrack4 any other OS
2010
PayPal Shop Digital <<= SQL injection Vulnerability
The vulnerability exists in the view_item.php script, which is vulnerable to SQL injection attacks. An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable script with the ItemID parameter containing malicious SQL code. This can allow the attacker to access or modify the application's data, execute system commands, or even access the underlying file system.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
