vendor:
Silurus Classifieds System
by:
Mr.SQL
9,3
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Silurus Classifieds System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Remote SQL Injection Vulnerability (category.php ID)
A vulnerability in Silurus Classifieds System allows an attacker to inject malicious SQL commands via the 'ID' parameter in the 'category.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation may allow an attacker to gain access to the system and/or disclose sensitive information.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Additionally, the application should use parameterized queries to prevent SQL injection.
