vendor:
XplodPHP
by:
cO2 [Algeria Security Crew]
8.8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: XplodPHP
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
XplodPHP Remote SQL Injection Vulnerability
A vulnerability exists in XplodPHP that allows an attacker to inject malicious SQL queries into the application. This can be exploited to gain access to sensitive information such as usernames and passwords, or to modify data in the database.
Mitigation:
Ensure that user input is properly sanitized and validated before being used in SQL queries.
