PHPGurukul Online Notes Sharing System SQL Injection Vulnerability in Cookie Handler Component

A critical SQL injection vulnerability has been identified in PHPGurukul Online Notes Sharing System version 1.0. The issue arises in the Cookie Handler component, specifically within the Dashboard file, where the sessionid argument is not properly sanitized, allowing for remote exploitation. While the original disclosure suggested a potential XPath injection, the characteristics of the attack payload align more closely with SQL injection.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

The vulnerability can be reproduced by sending a request to the '/Dashboard' endpoint with a crafted 'sessionid' cookie that includes SQL injection payloads. This can be done using tools like Burp Suite or by manually setting the cookie in a web browser.