CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AliRezaMohammadi دکمه، شبکه اجتماعی خرید dokme allows SQL Injection.This issue affects دکمه، شبکه اجتماعی خرید: from n/a through <= 2.0.6.
Explanation of Vulnerability in Simple Terms
A SQL injection vulnerability in دکمه، شبکه اجتماعی خرید versions 2.0.6 and earlier allows authenticated administrators to read sensitive database information. An attacker with high-level privileges can craft malicious SQL queries through the application. The vulnerability has limited integrity impact but can expose confidential data across the system.
What an attacker can do
Read sensitive data from the application's database by injecting SQL commands.
Potential impact on your site
Database contents may be exposed to site administrators with malicious intent or compromised admin accounts.
Conditions required to exploit
Attacker must have administrator-level access to the application.
Key dates
External resources
