CyberRota Analysis
AI-GeneratedThe vulnerability allows for SQL injection through the 'id_ambito' parameter in the endpoint '/ws/apiprensa/getVideoNextPrev', enabling attackers to manipulate database queries due to unsanitized input. This can lead to the exposure of sensitive database information and internal query structures, significantly increasing the risk of further exploitation. Organizations utilizing this endpoint should prioritize immediate remediation to protect their databases from potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database error messages and exposes the internal structure of the queries, which could facilitate further exploitation.