SQL Injection in Hotel And Tourism Reservation System details.php: Analysis, Impact, and POC

Vulnerability Overview Vulnerability Name: SQL Injection Vulnerability in Hotel And Tourism Reservation System Vulnerability Type: SQL Injection Vulnerable File: Description: Multiple unrestricted SQL injection vulnerabilities exist in the file. These vulnerabilities can be triggered via two code paths: 1. GET-based SQL Injection: In (Lines 9-10), the parameter is directly retrieved from the URL query string and concatenated into a query without any sanitization, escaping, or parameterization. 2. POST-based SQL Injection: In the booking form (Line 33), the parameters , , , , , and are directly concatenated into an SQL query. Exploitation: Any unauthenticated remote attacker can trigger these two vulnerabilities without requiring a login session. Impact Scope Data Exfiltration: Attackers can extract all room data, including prices, availability, and detailed information. Database Credential Leakage: Database credentials and other sensitive information can be dumped. Data Tampering: Booking records can be modified via the injection points, allowing for the creation of fraudulent bookings or the overwriting of legitimate records. Backend Database Access: Through UNION-based or blind SQL injection, attackers can access other database tables, potentially compromising the entire application backend. Remediation 1. Use for Numeric IDs: 2. Use Prepared Statements: 3. Disable Direct Error Output in Production Environments: - Turn off and use custom error handlers instead of exposing or database errors. Proof of Concept (POC) Code 1. Manual Column Count Detection (ORDER BY) 2. UNION-based SQL Injection 3. Database Fingerprinting (Manual) 4. Automated Exploitation (sqlmap) Code Analysis Vulnerable Code: Issue: and all booking fields are directly concatenated into SQL query strings without any validation, prepared statements, or escaping functions (such as ).

Goal Reached Thanks to every supporter — we hit 100%!

SQL Injection in Hotel And Tourism Reservation System details.php: Analysis, Impact, and POC

More from this source