Netartmedia Vlog System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Netartmedia Vlog System. This vulnerability allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter. Attackers can send POST requests to index.php within the forgotten_password module to extract sensitive database information.

Impact

Exploitation of this vulnerability allows for unauthorized database access, potentially leading to the extraction of sensitive information.

Reproduction

To reproduce this vulnerability, send a POST request to 'index.php' in the forgotten_password module. Include a crafted email value that injects SQL code, such as a payload that exploits SQL injection vulnerabilities by manipulating the SQL query processing.