vendor:
QWERTY CMS lite
by:
milw0rm.com
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: QWERTY CMS lite
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
QWERTY CMS lite – SQL INJ
A vulnerability in QWERTY CMS lite allows an attacker to inject SQL commands via the 'id' parameter in the 'index.php' script. An attacker can exploit this vulnerability to gain access to the administrator table, which contains the username and password. The attacker can then access the admin control panel by navigating to '/admin/admin.php'.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
