CVE-2019-13292
CRITICALwebERP 4.15 - SQL Injection via Payments.php Base64 Deserialization
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2019-13292. PoCs published by Semen Alexandrovich Lyhin, alealeluyah, alebrestado.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in WebERP 4.15 by leveraging insecure deserialization of base64-encoded payloads passed to the `unserialize()` function. The payload is injected into the `PaidArray` parameter, confirming the vulnerability via a time-based delay.
Description
A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is decoded, it is deserialized. Then, this deserialized data goes directly into a SQL query, with no sanitizing checks.
Exploits (4)
This exploit demonstrates a blind SQL injection vulnerability in WebERP 4.15 by leveraging insecure deserialization of base64-encoded payloads passed to the `unserialize()` function. The payload is injected into the `PaidArray` parameter, confirming the vulnerability via a time-based delay.
This repository contains a functional Python exploit for CVE-2019-13292, a blind SQL injection vulnerability in WebERP 4.15. The exploit leverages base64-encoded serialized data passed to the unserialize() function, which is then used in SQL queries without sanitization.
This repository contains a functional Python exploit for CVE-2019-13292, a blind SQL injection vulnerability in WebERP 4.15. The exploit leverages base64-encoded serialized data passed to the unserialize() function, which is then used in SQL queries without sanitization.
This repository contains a functional Python exploit for CVE-2019-13292, a blind SQL injection vulnerability in WebERP 4.15. The exploit leverages base64-encoded serialized payloads to inject malicious SQL queries via the 'Payments.php' endpoint, confirming vulnerability via time-based delays.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H