Description (CNA)
Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or manipulate database information by sending crafted payloads to the collections page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elements / Xhibiter NFT Marketplace | affected 1.10.2 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/52060
- https://elements.envato.com/xhibiter-nft-marketplace-html-template-AQN45FA
- https://www.vulncheck.com/advisories/xhibiter-nft-marketplace-sql-injection-via-collections-endpoint
ADP enrichment
No English description supplied.
No references supplied.