Description

A remote SQL injection vulnerability exists in Softbiz Recipes Portal Script. Input parameters are not properly sanitized before being used in database queries.

Impact

Attackers can extract all data from the database including user accounts, recipes, and administrative credentials.

Solution

Apply parameterized queries. Contact Softbiz for a security patch.

References