| शीर्षक | feelec-yishu feelcrm-os 1.0.0 SQL Injection |
|---|
| विवरण | FeelCRM 1.0.0 is affected by an authenticated error-based SQL injection vulnerability in the `/Index/Member/index` endpoint. The attacker-controlled `group_id` GET parameter is directly interpolated into the SQL expression `find_in_set('{$group_id}',group_id)` without integer validation, allowlist verification, or parameterized query handling. An authenticated attacker with access to the `member/index` action can submit a payload such as `1' AND extractvalue(1,concat(0x7e,version())) AND '1'='2` and cause the database to evaluate the injected expression. The supplied reproduction returns the MySQL version `8.0.46-0ubuntu0.24.04.4` in the SQL error message as `1105:XPATH syntax error`, confirming successful SQL execution and error-based information disclosure. The vulnerability requires a valid authenticated Index session and may allow further database information disclosure or manipulation depending on database privileges, query context, and error handling configuration. |
|---|
| स्रोत | ⚠️ https://github.com/feelec-yishu/feelcrm-os/issues/6 |
|---|
| उपयोगकर्ता | liaoxijun100 (UID 101246) |
|---|
| सबमिशन | 15/09/2026 03:32 AM (21 दिन पहले) |
|---|
| संयम | 05/10/2026 12:31 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413582 [feelec-yishu feelcrm-os 1.0.0 Member Endpoint MemberController.class.php index group_id SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|