CVE-2022-43328

Vulnerability

Canteen Management System v1.0, built using XAMPP PHP 8.1, contains a SQL injection vulnerability in the /youthappam/editorder.php script. The id parameter is not properly sanitized, allowing an attacker to inject arbitrary SQL commands. The vulnerability is exploitable with a Super Admin account (mayuri.infospace@gmail.com/rootadmin). [1]

Exploitation

An attacker with Super Admin privileges can send a crafted GET request to /youthappam/editorder.php?id=. The reference demonstrates a payload to determine database length: 1%20and%20length(database())%20=10--+. The attacker can modify the injection to extract data from the youthappam database. [1]

Impact

Successful exploitation allows an authenticated attacker to read arbitrary data from the database, potentially exposing sensitive information such as user credentials and application data. The injection appears to be blind-based, enabling step-by-step information disclosure. [1]

Mitigation

No official patch or fixed version has been released as of the publication date (2022-11-01). Users should apply input validation and parameterized queries to the id parameter or limit access to the vulnerable page. [1]