Smartshop SQL Injection Vulnerability in Search.php

A time-based blind SQL injection vulnerability has been identified in Smartshop version 1. This vulnerability allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php. Exploitation involves sending GET requests with malicious SQL payloads, such as SLEEP commands, which can be used to extract sensitive database information, including product details and system data.

Impact

Exploitation of this vulnerability allows for time-based blind SQL injection, where an attacker can manipulate SQL queries and potentially extract sensitive information from the database.

Reproduction

To reproduce this vulnerability, send a GET request to search.php with the 'searched' parameter. Include a payload that exploits the SQL injection, such as a SLEEP command. The application will pause for the duration specified in the SLEEP command, indicating that the SQL injection was successful.