itsourcecode Online House Rental System manage_user.php sql injection

Vulnerability

A critical SQL injection vulnerability exists in itsourcecode Online House Rental System version 1.0. The flaw is located in the manage_user.php file where the id parameter is directly concatenated into SQL queries without sanitization or parameterization [1]. The vulnerable software is the "Online House Rental System Project In PHP With Source Code" available from the vendor's website [1].

Exploitation

The attacker can exploit this vulnerability remotely without requiring authentication [1]. By manipulating the id parameter in an HTTP request (e.g., id=1 AND 7032=7032), the attacker can inject malicious SQL statements [1]. The exploit has been publicly disclosed, including proof-of-concept payloads and sqlmap commands to automate extraction of database contents [1].

Impact

Successful exploitation allows an attacker to perform arbitrary SQL queries against the backend database [1]. This can lead to unauthorized access to sensitive data, modification or deletion of database records, and potentially full system compromise [1]. The impact includes data leakage, data tampering, and service disruption [1].

Mitigation

As of the publication date (2024-06-14), no patched version has been released by the vendor [1]. The affected version remains at V1.0 [1]. The recommended remediation is to use parameterized queries (prepared statements) and validate all user-supplied input, particularly the id parameter in manage_user.php [1].