DomainsPRO SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in DomainsPRO version 1.2, an Internet domain management tool. This vulnerability allows attackers to retrieve, create, update, and delete databases through the 'd' parameter in the '/article.php' endpoint.

Impact

Exploitation of this vulnerability could lead to unauthorized database access and manipulation, allowing attackers to retrieve, create, update, or delete database information.

Remediation

The vulnerability has been fixed in DomainsPRO version 1.3.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
7.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.