CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3.
Explanation of Vulnerability in Simple Terms
Who Hit The Page – Hit Counter versions up to 1.4.14.3 contain a SQL injection vulnerability in database query handling. An attacker with high-level privileges can inject malicious SQL commands to read sensitive data from the database. The vulnerability affects the site's data confidentiality and may cause service disruption.
What an attacker can do
Read sensitive data from the site's database and cause service disruption.
Potential impact on your site
Unauthorized database access and potential data breach if a privileged account is compromised.
Conditions required to exploit
Attacker must have high-level administrative or privileged account access to the site.
Key dates
External resources
Related vulnerabilities
