vendor:
N/A
by:
tempe_mendoan
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
N/A
Site by Redlab Multiple Vulnerabilities
The vulnerability exists due to insufficient filtration of user-supplied input in multiple parameters in multiple scripts. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database. This can allow the attacker to steal or modify sensitive data, exploit vulnerable versions of SQL Server, bypass authentication and gain access to the administrator's account, etc.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All input data should be carefully verified before passing to the SQL statement.
