HaPe PKH SQL Injection Vulnerability in admin/media.php

A SQL injection vulnerability has been identified in HaPe PKH version 1.1, specifically within the admin/media.php file. This vulnerability allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Unauthenticated attackers can exploit this issue in the desa module, while authenticated users can target the pengurus, fasilitas, and kelompok modules. Successful exploitation could lead to the extraction of sensitive database information, including details about the current user, database name, and DBMS version.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access or modification. In this case, the vulnerability allows extraction of sensitive database information such as the current user, database name, and DBMS version.

Reproduction

The vulnerability can be reproduced by sending a POST request to 'admin/media.php' with the 'module' parameter set to 'desa' and the 'act' parameter set to 'hapus'. Include a crafted 'id' parameter that injects SQL code. This vulnerability can also be reproduced by authenticated users by targeting the 'pengurus', 'fasilitas', or 'kelompok' modules with similar SQL injection payloads in the 'id' parameter.