vendor:
Photo-Rigma.BiZ
by:
Photo-Rigma.BiZ Team
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Photo-Rigma.BiZ
Affected Version From: v30
Affected Version To: v30
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A
Remote SQL Injection (SQLi) Vulnerability
Photo-Rigma.BiZ v30 is vulnerable to a Remote SQL Injection vulnerability. This vulnerability allows an attacker to execute arbitrary SQL commands on the vulnerable system. This can be exploited to bypass authentication, access, modify and delete data within the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries. Additionally, parameterized queries should be used to prevent SQL injection attacks.
