vendor:
Posse Softball Director CMS
by:
easy laster
9,3
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: Posse Softball Director CMS
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: YES
Related CWE: N/A
CPE: a:possesoftball:posse_softball_director_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2012
Posse Softball Director CMS Blind SQL Injection Vulnerability team.php
The vulnerability can be exploited by sending a malicious HTTP request to the vulnerable server with a crafted URL containing a malicious SQL query. The malicious SQL query can be used to extract data from the database or to execute malicious code on the server.
Mitigation:
The vulnerability can be mitigated by sanitizing the user input and using prepared statements.
