FrontAccounting Boolean SQL Injection via IN() Clause with POC

Vulnerability Overview Vulnerability Name: Boolean SQL Injection (Boolean SQL Injection via IN() Clause Injection) Vulnerability Description: In FrontAccounting version 2.4.19, there exists a boolean SQL injection vulnerability. This vulnerability is located in the parameter within the file, allowing malicious SQL code to be injected via the clause. Attackers can exploit this vulnerability to perform boolean blind SQL injection, thereby extracting sensitive information from the database. Affected Scope Affected Version: FrontAccounting 2.4.19 Vulnerability Type: Boolean SQL Injection Impact: Attackers can use boolean blind injection techniques to gradually extract sensitive data from the database, such as user passwords and other user information. Remediation Measures 1. Input Validation: Strictly validate and filter all user inputs to ensure that input data conforms to the expected format. 2. Parameterized Queries: Use parameterized queries or prepared statements to avoid directly concatenating user input into SQL queries. 3. Principle of Least Privilege: Database accounts should adhere to the principle of least privilege to reduce potential security risks. 4. Regular Updates: Regularly update software versions to patch known vulnerabilities. POC Code The following is Proof of Concept (POC) code to exploit this vulnerability: Data Extraction Example Through boolean blind injection, sensitive information in the database can be extracted gradually. For example, extracting the hash of an administrator's password: Using the above method, the complete password hash value can be extracted step by step.

Goal Reached Thanks to every supporter — we hit 100%!

FrontAccounting Boolean SQL Injection via IN() Clause with POC