XooDigital SQL Injection Vulnerability in Results.php
Vulnerability
A SQL injection vulnerability has been identified in XooDigital Latest, allowing unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. This vulnerability exists in the results.php file, where attackers can send GET requests with malicious 'p' values to extract sensitive database information.
Impact
Exploitation of this vulnerability allows for SQL injection, where attackers can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.
Reproduction
To reproduce this vulnerability, send a GET request to results.php with a crafted 'p' parameter that includes SQL injection payloads. The injected SQL code will be executed by the database, allowing extraction or manipulation of database information.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.