SQL Injection in CASAP-Automated-Enrollment-System update_student.php

Vulnerability Overview Vulnerability Title: CASAP-Automated-Enrollment-System – SQL Injection in update_student.php Vulnerability Type: SQL Injection Affected File: update_student.php Vulnerable Parameter: fname Backend Database: MySQL >= 5.0.12 (MariaDB fork) Severity: High Impact Enumeration of database schemas, tables, and rows Exposure of sensitive user/operational data Potential lateral movement, if credentials or session materials are stored in the database Remediation Use Prepared Statements: Ensure all SQL queries use prepared statements to avoid directly concatenating user input. Input Validation: Perform strict validation and filtering of user input to ensure it conforms to expected formats. Principle of Least Privilege: Database users should have minimal privileges, granting only the necessary access rights. POC Code SQLMap Summary Technical Description Vulnerable Parameter: The parameter is concatenated directly into the SQL statement without validation, leading to SQL injection. Exploitation Method: Database structure enumeration and data extraction can be performed using time-based blind injection (SLEEP) and UNION injection techniques. Impact Data Leakage: Attackers can enumerate database schemas, tables, and rows, exposing sensitive user/operational data. Lateral Movement: If credentials or session materials are stored in the database, attackers may perform lateral movement. Reproduction Steps 1. Navigate to 2. Intercept the request and inject the provided payload into the parameter of 3. Observe conditional responses, time delays, or reflected injection payloads. 4. Confirm database fingerprinting and data extraction, contingent upon the application's database privileges. Vulnerable Code (Screenshot) References OWASP: SQL Injection Prevention Cheat Sheet CWE-89: SQL Injection

Goal Reached Thanks to every supporter — we hit 100%!

SQL Injection in CASAP-Automated-Enrollment-System update_student.php

More from this source