CVE-2023-7189

MEDIUM5.5/ 10.0
Share:
Published: December 31, 2023 at 03:15 PM
Modified: November 21, 2024 at 08:45 AM
Source: cna@vuldb.com

Vulnerability Description

A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249391. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Metrics

Base Score
5.5
Severity
MEDIUM
Vector String
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

Source: cna@vuldb.com

AI Security Analysis

01 // Technical Summary

S-CMS versions up to 2.0_build20220529-20231006 are vulnerable to a critical SQL injection flaw. Attackers can exploit the /s/index.php?action=statistics endpoint by manipulating the lid parameter, potentially leading to unauthorized access, data exfiltration, and complete system compromise. The vendor has been unresponsive, increasing the risk of widespread exploitation.

02 // Vulnerability Mechanism

03 // Deep Technical Analysis

The vulnerability stems from insufficient input validation and sanitization of the lid parameter within the /s/index.php?action=statistics file. Specifically, the application fails to properly escape or filter user-supplied input before incorporating it into an SQL query. This allows an attacker to inject malicious SQL code, which can then be executed by the database server. The lack of proper input validation allows for the execution of arbitrary SQL commands, enabling attackers to bypass authentication, retrieve sensitive data, modify database contents, or even execute commands on the underlying server if the database user has sufficient privileges.

CVE-2023-7189 - MEDIUM Severity (5.5) | Free CVE Database | 4nuxd