vendor:
WebVet
by:
Ihsan Sencan
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: WebVet
Affected Version From: 0.1a
Affected Version To: 0.1a
Patch Exists: NO
Related CWE:
CPE: a:webvet:webvet:0.1a
Platforms Tested: Windows 7 x64, Kali Linux x64
2018
WebVet 0.1a – ‘id’ SQL Injection
The WebVet 0.1a application is vulnerable to SQL injection through the 'id' parameter in the client.php file. An attacker can exploit this vulnerability to execute arbitrary SQL queries in the database.
Mitigation:
To mitigate this vulnerability, input validation and parameterized queries should be implemented in the application to prevent SQL injection attacks.