vendor:
WsCMS
by:
cyberlog
8,8
CVSS
HIGH
SQL Injection and XSS/HTML Injection
89,79
CWE
Product Name: WsCMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
WsCMS SQL Injection Vulnerability [ Multiple Vulnerabilities ]
The vulnerability exists in the WsCMS web application. An attacker can exploit the vulnerability by sending malicious SQL queries to the vulnerable parameters in the URL. An attacker can also exploit the XSS/HTML Injection vulnerability by sending malicious HTML code to the vulnerable parameter in the URL.
Mitigation:
Input validation should be done on the server-side to prevent malicious SQL queries and HTML code from being executed.
