| शीर्षक | NEWTYPE WebEIP 3.0 Missing Authentication, Authorization Bypass and SQL Injection |
|---|
| विवरण | WebEIP provides companies with websites that employees frequently use, which originally required login to access. However, through the vulnerabilities, it is possible to obtain employee IDs, names, and other information without login, and there is a high chance that employee signatures can be processed.
1. Missing Authorization
- Some of files are read without login. Personnel information, some online archives files information are found.
- /EIP_Com_Selector3_searchDATA.aspx
- /EIP_Com_FileList.aspx
- /EIP_MyPAGE_settingMenu.aspx
- /EIP_MyPAGE.aspx
2. Bypass Authorization
- In the file 'EIP_MyPAGE.aspx', modifying the cookie value is able to result in bypassing authorization. Employee IDs, names, and other staff information without login are found.
3. SQL injection
- In the file '/EIP_Com_Selector3_searchDATA.aspx', the parameter "data" does not properly sanitize user input before using it in an SQL query.
- Because of Missing Authorization, this vulnerability allows for SQL injection attacks without login.
- This can be exploited by sending a crafted request to the login endpoint with malicious SQL code.
|
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1BJhYjqSvYpAB2ZJGR8vD_COeICxrXNlu/view?usp=drive_link |
|---|
| उपयोगकर्ता | ox882 (UID 98191) |
|---|
| सबमिशन | 09/06/2026 08:47 AM (2 महीनों पहले) |
|---|
| संयम | 03/08/2026 09:27 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385531 [NewType WebEIP तक 3.0 /EIP_Com_FileList.aspx कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|