vendor:
PHP Classifieds Rental Script
by:
OoN_Boy
7.5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: PHP Classifieds Rental Script
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2016
PHP Classifieds Rental Script Blind SQL Vulnerabilities
The PHP Classifieds Rental Script is vulnerable to Blind SQL Injection. An attacker can exploit this vulnerability by injecting SQL queries through the 'refid' parameter in the 'product_details.php' page, which can lead to unauthorized access or data manipulation in the database.
Mitigation:
The vendor should sanitize and validate user input to prevent SQL injection attacks. Users are advised to update to the latest version of the PHP Classifieds Rental Script that includes a patch for this vulnerability.
