| 标题 | SourceCodester Simple Client Management System in PHP with Source Code V1.0 SQL Injection |
|---|
| 描述 | Vulnerability Overview
The Simple Client Management System in PHP with Source Code application does not properly validate or sanitize user input for the id parameter. This results in a time-based blind SQL injection vulnerability. The affected endpoint was reachable without prior authentication in the local test environment. An attacker can construct and execute malicious SQL statements through the affected endpoint and backend SQL sink.
Problem Type and Root Cause
Type: SQL Injection
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Root Cause: User-supplied input from the id parameter flows into the save_service SQL execution path without prepared statements, safe parameter binding, or strict allowlist validation. This allows attacker-controlled input to alter the intended query logic.
Impact
Attack Conditions: Network access to the affected endpoint is sufficient in the local test environment.
Potential Impact: The verified evidence proves attacker-controlled SQL query alteration and backend DBMS fingerprinting. Depending on the affected query and application privileges, exploitation may support unauthorized data access or modification; final submission impact should remain limited to the collected evidence.
|
|---|
| 来源 | ⚠️ https://github.com/lyf3273/CVE/issues/3 |
|---|
| 用户 | kalasama (UID 97462) |
|---|
| 提交 | 2026-06-25 17時31分 (2 月前) |
|---|
| 管理 | 2026-08-14 07時38分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 389958 [SourceCodester Simple Client Management System 1.0 Master.php?f=save_service 标识符 SQL注入] |
|---|
| 积分 | 20 |
|---|