PT-2024-31410 · I-Educar · I-Educar

0Xbhsu · Published 2024-08-28 · Updated 2024-09-13 · CVE-2024-45059

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions i-Educar versions prior to 2.9

Description A SQL Injection vulnerability was found in the ieducar/intranet/funcionario vinculo det.php file, which creates the query by concatenating the unsanitized GET parameter cod func, allowing the attacker to obtain sensitive information such as emails and password hashes.

Recommendations For versions prior to 2.9, update to version 2.9 or later, as commit 7824b95745fa2da6476b9901041d9c854bf52ffe fixes the issue. As a temporary workaround, consider restricting access to the funcionario vinculo det.php file or sanitizing the cod func parameter to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-45059

GHSA-2V4W-7XQR-HXMR

Affected Products

I-Educar

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45059.json · Exploit
• 🔥 https://github.com/portabilis/i-educar/security/advisories/GHSA-2v4w-7xqr-hxmr · Exploit
• https://github.com/portabilis/i-educar/commit/7824b95745fa2da6476b9901041d9c854bf52ffe · Patch
• https://osv.dev/vulnerability/CVE-2024-45059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45059 · Security Note
• https://twitter.com/CveFindCom/status/1828901293911396511 · Twitter Post
• https://twitter.com/CVEnew/status/1828892981979410523 · Twitter Post
• https://t.me/cvenotify/94593 · Telegram Post
• https://twitter.com/CVESource/status/1828910580431724601 · Twitter Post
• https://t.me/cvedetector/4358 · Telegram Post
• https://portswigger.net/web-security/sql-injection · Note
• https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html · Note
• https://twitter.com/VulmonFeeds/status/1828923100844491170 · Twitter Post