vendor:
Softbiz PHP FAQ Script
by:
Sangteamtham
7,5
CVSS
HIGH
Blind SQL Injection
89
CWE
Product Name: Softbiz PHP FAQ Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Softbiz PHP FAQ Script Blind SQL Vulnerability
Softbiz PHP FAQ Script is vulnerable to Blind SQL Injection. An attacker can exploit this vulnerability by sending a crafted HTTP request with malicious SQL query to the vulnerable server. The malicious SQL query can be used to extract sensitive information from the database such as usernames, passwords, etc. The vulnerable parameter is the ‘id’ parameter in the ‘print_article.php’ script. An attacker can use the ‘substring’ function to extract the version of the database installed on the server. The attacker can then use the ‘select’ statement to extract the data from the database.
Mitigation:
The best way to mitigate this vulnerability is to use parameterized queries. This will ensure that the user input is treated as a string and not as a part of the SQL query. Additionally, the application should be tested for SQL injection vulnerabilities using automated tools.
