CVE-2020-35674

CRITICAL

9.8

Description

BigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in /membership_passwordReset.php (the endpoint that is responsible for issuing self-service password resets). An unauthenticated attacker is able to send a request containing a crafted payload that can result in sensitive information being extracted from the database, eventually leading into an application takeover. This vulnerability was introduced as a result of the developer trying to roll their own sanitization implementation in order to allow the application to be used in legacy environments.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/29/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

bigprof:online_invoicing_system

Weaknesses (CWE)

CWE-89

References

https://labs.ingredous.com/2020/07/13/ois-sqli/(cve@mitre.org)

https://labs.ingredous.com/2020/07/13/ois-sqli/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.