vendor:
Picture-Engine
by:
Kacper
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Picture-Engine
Affected Version From: 1.2.2000
Affected Version To: 1.2.2000
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Picture-Engine Remote SQL Injection Exploit
This is a remote SQL injection exploit for Picture-Engine version 1.2.0. The vulnerability allows an attacker to inject SQL queries into the application's database, potentially gaining unauthorized access to sensitive information.
Mitigation:
The vendor should release a patch to fix the SQL injection vulnerability. In the meantime, users can protect themselves by ensuring they have strong passwords and limiting access to the application's database.
