Executive Summary

The Cab Management System v1.0 by Sourcecodester has a SQL injection vulnerability in the file /cms/admin/bookings/view_booking.php. This vulnerability exists in the 'id' parameter of the URL, which is used to query the database.

An attacker can inject malicious SQL code through this 'id' parameter, such as a UNION SELECT statement, to retrieve sensitive information from the backend database, like the database name.

The attack can be performed within an authenticated session, meaning an attacker with access to a valid session could exploit this to execute arbitrary SQL commands.

Useful 0 Not Useful 0

Impact Analysis

This SQL injection vulnerability can allow an attacker to execute arbitrary SQL commands on the backend database.

• Unauthorized disclosure of sensitive data stored in the database.
• Potential modification or deletion of data, leading to data integrity issues.
• Further compromise of the system if the attacker uses the vulnerability to escalate privileges or access other parts of the system.

Useful 0 Not Useful 0

Detection Guidance

This SQL injection vulnerability can be detected by testing the `id` parameter in the URL `/cms/admin/bookings/view_booking.php?id=` for SQL injection payloads.

A suggested command to test this is to send an HTTP request with a payload that attempts to extract database information, such as:

• /cms/admin/bookings/view_booking.php?id=1' union select 1,2,3,4,database(),6,7,8,9,10--+

This payload uses a UNION SELECT statement to retrieve the current database name, which indicates the presence of SQL injection if successful.

Testing can be performed using tools like curl or a web browser within an authenticated session, as the vulnerability requires a valid PHP session cookie (`PHPSESSID`).

Useful 0 Not Useful 0

Compliance Impact

The SQL injection vulnerability in the Sourcecodester Cab Management System 1.0 allows attackers to execute arbitrary SQL commands and potentially extract sensitive information from the backend database.

Such unauthorized data disclosure can lead to breaches of confidentiality and data integrity, which are critical requirements under common standards and regulations like GDPR and HIPAA.

Therefore, this vulnerability could result in non-compliance with these regulations due to the risk of exposing personal or sensitive data without proper authorization or protection.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the SQL injection vulnerability in Sourcecodester Cab Management System 1.0, immediate steps include:

• Avoid using the vulnerable `id` parameter in `/cms/admin/bookings/view_booking.php` until a fix is applied.
• Implement input validation and parameterized queries (prepared statements) to prevent SQL injection on the `id` parameter.
• Restrict access to the affected page to trusted users only, as the exploit requires an authenticated session.
• Monitor and review logs for suspicious activity involving the `id` parameter.
• Apply any available patches or updates from the vendor or source code maintainer addressing this vulnerability.

Useful 0 Not Useful 0