vendor:
Content Management System
by:
cyberlog
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Content Management System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
The iceberg ‘Content Management System’ SQL Injection Vulnerability
The iceberg 'Content Management System' is vulnerable to SQL Injection. The vulnerability can be exploited by sending malicious SQL queries to the vulnerable website. The vulnerable parameter is 'p_id' which can be found in the URL of the website. The malicious query can be used to extract sensitive information from the database.
Mitigation:
The best way to mitigate this vulnerability is to use parameterized queries and input validation. It is also recommended to use a web application firewall to detect and block malicious requests.
