Compliance Impact

The SQL injection vulnerability in the Online Thesis Archiving System v1.0 allows unauthorized data disclosure from the backend database. Such unauthorized access to sensitive data can lead to non-compliance with data protection regulations and standards like GDPR and HIPAA, which require the protection of personal and sensitive information against unauthorized access and breaches.

By enabling attackers to extract data without authorization, this vulnerability could result in exposure of personal or confidential information, thereby violating requirements for data confidentiality, integrity, and security mandated by these regulations.

Useful 0 Not Useful 0

Executive Summary

The Online Thesis Archiving System v1.0 by Sourcecodester has an SQL injection vulnerability in the file /otas/view_archive.php.

This vulnerability occurs at the URL parameter 'id' in the endpoint /otas/?page=view_archive&id=, which allows an attacker to manipulate the parameter to execute arbitrary SQL queries on the backend database.

For example, an attacker can use a crafted payload to inject a UNION SELECT statement to retrieve sensitive information such as the current database name.

Useful 0 Not Useful 0

Impact Analysis

This SQL injection vulnerability can allow an attacker to execute arbitrary SQL commands on the backend database.

• Unauthorized disclosure of sensitive data stored in the database.
• Potential modification or deletion of database records.
• Compromise of the integrity and confidentiality of the system's data.

Useful 0 Not Useful 0

Detection Guidance

This SQL injection vulnerability can be detected by sending crafted HTTP requests to the vulnerable endpoint and observing the response for signs of SQL injection.

Specifically, you can test the URL parameter `id` in the endpoint `/otas/?page=view_archive&id=` by injecting SQL payloads.

• Send a request like `/otas/?page=view_archive&id=0' union select 1,2,3,4,database(),6,7,8,9,10,11,12,13--+` to check if the database name is returned in the response.
• Use tools such as curl or a web proxy to send the above request and analyze the HTTP response for database information disclosure.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the SQL injection vulnerability in the Online Thesis Archiving System v1.0, immediate steps include:

• Sanitize and validate all user inputs, especially the 'id' parameter in the /otas/view_archive.php file.
• Use prepared statements or parameterized queries to prevent direct injection of SQL code.
• Restrict database permissions to limit the impact of a potential injection.
• Monitor and log suspicious requests targeting the vulnerable endpoint.
• Apply any available patches or updates from the vendor or source if available.

Useful 0 Not Useful 0