CVE-2020-36112

CRITICALNuclei

cse_bookstore_project cse_bookstore Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-36112 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 21, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

cse_bookstore

Browse cse_bookstore_project / cse_bookstore
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBCSE Bookstore 1.0 - Multiple SQL InjectionExploitDB exploitby Musyoka IanNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALCSE Bookstore 1.0 - SQL InjectionCVSS 9.8

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database.

Impact

Unauthenticated attackers can execute SQL injection to dump the entire database including sensitive student and administrative data.

Remediation

Upgrade to the latest version to mitigate this vulnerability.

WeaknessesCWE-89
Authorsgeeknik
Template tagscvecve2020sqlicseedbtenablecse_bookstore_projectvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:cse_bookstore_project:cse_bookstore:1.0:*:*:*:*:*:*:*
https://www.exploit-db.com/exploits/49314 https://www.tenable.com/cve/CVE-2020-36112 https://nvd.nist.gov/vuln/detail/CVE-2020-36112 https://github.com/StarCrossPortal/scalpel https://github.com/anonymous364872/Rapier_Tool

Source: ProjectDiscovery

References

2