CSZCMS SQL Injection Vulnerability in Members View Endpoint

An authenticated SQL injection vulnerability has been identified in CSZCMS version 1.3.0. This vulnerability exists within the members view functionality, allowing authenticated attackers to manipulate database queries. By injecting malicious SQL code through the view parameter, attackers could execute time-based blind SQL injection attacks and extract information from the database.

Impact

Exploitation of this vulnerability allows for authenticated SQL injection, with the potential to execute time-based blind SQL injection attacks and extract database information.

Reproduction

To reproduce this vulnerability, log into the admin portal and navigate to the 'Member Users' section. Click the 'View' button next to any username. Intercept the request and modify the view parameter to inject a SQL payload, such as 'or(sleep(10))', which exploits the time-based blind SQL injection vulnerability.