Kidaze Course Selection System SQL Injection Vulnerability in COUNT2.php
Vulnerability
A SQL injection vulnerability has been identified in the Kidaze Course Selection System, specifically in version 1.0 prior to commit 42cd892b40a18d50bd4ed1905fa89f939173a464. The issue arises in the file '/Profilers/PriProfile/COUNT2.php', where the 'cname' parameter is manipulated, allowing attackers to inject malicious SQL code. This vulnerability can be exploited remotely, without any authentication.
Impact
Exploitation of this vulnerability allows for unauthorized database access, manipulation of data, and potential disruption of services. It poses a significant risk to the overall security of the system and the integrity of its data.
Reproduction
The vulnerability can be reproduced by sending a POST request to '/Profilers/PriProfile/COUNT2.php' with a crafted 'cname' parameter. This can be done using tools like sqlmap, which can automate the injection process and exploit the vulnerability.
Remediation
It is recommended to use prepared statements and parameter binding to prevent SQL injection, validate and filter user input, minimize database user permissions, and conduct regular security audits.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.