CVE-2024-35584
HIGH NUCLEIOpenSis Community Edition 8.0-9.1 - Authenticated SQL Injection via X-Forwarded-For Header
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-35584. PoCs published by whwhwh96. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2024-35584, an authenticated SQL injection vulnerability in OpenSIS Community Edition 9.1 to 8.0. The vulnerability arises from unsanitized use of the 'X-Forwarded-For' header in SQL queries across multiple files, with proof of concept details and mitigation recommendations.
Description
SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from "X-Forwarded-For" header and appends it to a SQL INSERT statement directly, leading to SQL Injection.
Exploits (1)
This repository provides a detailed technical analysis of CVE-2024-35584, an authenticated SQL injection vulnerability in OpenSIS Community Edition 9.1 to 8.0. The vulnerability arises from unsanitized use of the 'X-Forwarded-For' header in SQL queries across multiple files, with proof of concept details and mitigation recommendations.
Nuclei Templates (1)
http.title:"opensis"
title="opensis"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H