Collectric CMU SQL Injection Vulnerability in lang Parameter

A boolean-based blind SQL injection vulnerability has been identified in Collectric CMU version 1.0. The issue resides in the lang parameter, allowing unauthenticated attackers to manipulate database queries during the authentication process. Exploitation of this vulnerability enables attackers to inject SQL code through the lang parameter in login requests, potentially extracting sensitive information from the database using time-based blind SQL injection techniques.

Impact

Exploitation of this vulnerability allows for boolean-based blind SQL injection, with the possibility of extracting sensitive information from the database.

Reproduction

The vulnerability can be reproduced by sending a login request with a crafted payload in the lang parameter. The payload should include SQL injection techniques, such as using 'AND' to create a boolean-based blind SQL injection or 'SLEEP' for time-based blind SQL injection.