AssamLook CMS SQL Injection Vulnerability in product.php

A critical SQL injection vulnerability has been identified in AssamLook CMS version 1.0. The issue arises in the file product.php, where improper handling of the ID parameter allows for SQL injection attacks. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for blind SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information.

Reproduction

The vulnerability can be reproduced by sending a request to product.php with a crafted ID parameter that exploits the SQL query handling. This can be done remotely, taking advantage of the application's SQL query processing.