This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: SQL Injection in Sentrifugo HRM. ๐ **Consequences**: Attackers can extract **ALL** database data via crafted queries. Critical integrity & confidentiality loss.
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **CWE-89**: Improper Neutralization of Special Elements used in an SQL Command. ๐ **Flaw**: Unsanitized `sort_name` parameter in `/sentrifugo/index.php/default/reports/activeuserrptpdf`.
Q3Who is affected? (Versions/Components)
๐ข **Vendor**: Sentrifugo. ๐ฆ **Product**: Sentrifugo HRM System. ๐ **Version**: Specifically **v3.2** is affected. Check your deployment version immediately!
Q4What can hackers do? (Privileges/Data)
๐ **Privileges**: No Auth Required (PR:N). ๐ **Data**: High Impact (C:H, I:H, A:H). Hackers can read, modify, and delete **everything** in the HR database.
๐ **Public Exp**: No specific PoC code provided in data. โ ๏ธ **Risk**: High CVSS score (9.8) suggests wild exploitation potential. Assume it's being actively targeted.
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for `/sentrifugo/index.php/default/reports/activeuserrptpdf`. ๐งช **Test**: Inject SQL payloads into the `sort_name` parameter. ๐ก **Tools**: Use SQLMap or manual Burp Suite requests.
Q8Is it fixed officially? (Patch/Mitigation)
๐ ๏ธ **Patch**: Update to latest version immediately. ๐ข **Source**: Refer to Incibe CERT advisory for official vendor guidance. ๐ **Action**: Apply vendor patches ASAP.
Q9What if no patch? (Workaround)
๐ง **Workaround**: Block external access to the `/reports/activeuserrptpdf` endpoint. ๐ **Mitigation**: Implement WAF rules to filter SQL injection patterns in `sort_name`.โฆ