Netartmedia PHP Mall SQL Injection Vulnerability

Multiple SQL injection vulnerabilities have been identified in Netartmedia PHP Mall version 4.1. These vulnerabilities allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Exploitation of these vulnerabilities could lead to the extraction of sensitive database information, including user credentials and system data.

Impact

Exploitation of these vulnerabilities allows for SQL injection, where attackers can manipulate database queries to extract or potentially modify sensitive information.

Reproduction

The SQL injection vulnerability can be reproduced by sending crafted requests that include SQL payloads in the 'id' parameter of 'index.php' or the 'Email' parameter of 'loginaction.php'.