vendor:
URL Rotator
by:
Hussin X
9
CVSS
HIGH
SQL Injection
89
CWE
Product Name: URL Rotator
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
URL Rotator ( id ) Remote SQL Injection Vulnerability
The vulnerability exists due to insufficient sanitization of user-supplied input passed via the 'id' parameter to the 'tr.php' script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Successful exploitation may allow an attacker to gain access to the vulnerable application, disclose sensitive information, modify data, etc.
Mitigation:
Input validation should be used to prevent SQL injection attacks. It is also recommended to use parameterized queries instead of dynamic queries.
