vendor:
DreamPics Builder
by:
Mr.SQL
9,3
CVSS
HIGH
SQL Injection
89
CWE
Product Name: DreamPics Builder
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Remote SQL Injection Vulnerability ( index.php fuseaction )
A vulnerability in the DreamPics Builder application allows an attacker to inject arbitrary SQL commands via the 'fuseaction' parameter in the 'index.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation may allow an attacker to gain access to the application with administrative privileges.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
