vendor:
Webloader v7 - v8 ( vid )
by:
ByEge
8,8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Webloader v7 - v8 ( vid )
Affected Version From: v7
Affected Version To: v8
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Webloader v7 – v8 ( vid ) SQL Injection Vulnerability
Webloader v7 - v8 ( vid ) is vulnerable to SQL Injection. An attacker can inject malicious SQL queries to the vulnerable parameter and gain access to the database. This can lead to unauthorized access to sensitive information such as usernames, passwords, and other confidential data.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.