header-logo
Suggest Exploit
vendor:
TA.CMS
by:
7.5
CVSS
HIGH
Local File Inclusion, SQL Injection
CWE
Product Name: TA.CMS
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

TA.CMS Local File Inclusion and SQL Injection Vulnerabilities

The TA.CMS application is vulnerable to multiple local file inclusion and SQL injection vulnerabilities. An attacker can exploit these vulnerabilities to compromise the application, gain unauthorized access to or modify data, exploit other vulnerabilities in the database, and view and execute arbitrary local files within the context of the webserver.

Mitigation:

To mitigate these vulnerabilities, it is recommended to apply the latest patches and updates provided by the vendor. Additionally, input validation and sanitization should be implemented to prevent SQL injection attacks.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/50773/info

TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities.

An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and execute arbitrary local files within the context of the webserver. 

http://www.example.com/index.php?p_name=events_item_view&id=17' SQL

Navigation

Suggest Exploit

Services By CQR