vendor:
CMS System
by:
^Xecuti0n3r
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: CMS System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2011
Realmarketing CMS System Sensitive Database Disclosure Vulnerability
The vulnerability exists in Realmarketing CMS System, which allows an attacker to inject malicious SQL queries via the vulnerable parameters such as 'id', 'content' and 'portalID'. An attacker can exploit this vulnerability to gain access to sensitive information from the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
