2021-05-18 22:56:54 +00:00
id : CVE-2020-36112
info :
2022-04-29 19:58:07 +00:00
name : CSE Bookstore 1.0 - SQL Injection
2021-05-18 22:56:54 +00:00
author : geeknik
2022-04-22 10:38:41 +00:00
severity : critical
2022-04-29 19:58:07 +00:00
description : "CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database."
2021-08-18 11:37:49 +00:00
reference :
2021-08-19 14:44:46 +00:00
- https://www.exploit-db.com/exploits/49314
- https://www.tenable.com/cve/CVE-2020-36112
2022-04-29 19:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2020-36112
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2020-36112
cwe-id : CWE-89
2022-04-22 10:38:41 +00:00
tags : cve,cve2020,sqli,cse
2021-05-18 22:56:54 +00:00
requests :
- raw :
- |
GET /ebook/bookPerPub.php?pubid=4' HTTP/1.1
Host : {{Hostname}}
matchers :
- type : word
part : body
words :
- "get book price failed! You have an error in your SQL syntax"
- "Can't retrieve data You have an error in your SQL syntax"
condition : or
2022-04-29 19:58:07 +00:00
# Enhanced by mp on 2022/04/28
