vendor:
N/A
by:
Mohammed Fathi, Zooka, El3arby
7.5
CVSS
HIGH
Sql Injection
89
CWE
Product Name: N/A
Affected Version From: All
Affected Version To: All
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP professional
2011
Sql injextion
Sql injection on file News.php?id= http://xxx.com/news.php?id=[Sql] ---- Live -- http://www.site.com/news.php?id=157[sql commends] ----
Mitigation:
Input validation and sanitization, use of prepared statements, use of stored procedures, use of parameterized queries, use of least privilege accounts, use of web application firewalls
