CVE-2018-25406
SQL Injection in eNdonesia Portal 8.7
Publication date: 2026-05-30
Last updated on: 2026-05-30
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| endonesia | endonesia_portal | 8.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
eNdonesia Portal version 8.7 contains multiple SQL injection vulnerabilities in the mod.php file. These vulnerabilities allow unauthenticated attackers to inject malicious SQL code through parameters such as artid, cid, did, contid, and aboutid across several modules including publisher, diskusi, galeri, content, and about.
By exploiting these flaws, attackers can execute arbitrary SQL queries on the backend database, which can lead to extraction of sensitive information like database credentials, usernames, and version information.
How can this vulnerability impact me? :
This vulnerability can have a significant impact by allowing attackers to gain unauthorized access to sensitive data stored in the database. They can extract database credentials, usernames, and other critical information.
Such unauthorized access can compromise the confidentiality and integrity of your data, potentially leading to data breaches, unauthorized data manipulation, or exposure of sensitive information.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending crafted HTTP requests with SQL injection payloads to the vulnerable parameters (artid, cid, did, contid, aboutid) in the mod.php file across the publisher, diskusi, galeri, content, and about modules.
Detection involves monitoring for unusual or malicious SQL query patterns or unexpected database errors in response to these parameters.
A common approach is to use tools like curl or specialized vulnerability scanners to test these parameters for SQL injection.
- Example curl command to test the 'artid' parameter for SQL injection:
- curl "http://targetsite/mod.php?artid=1' OR '1'='1"
- Look for abnormal responses such as database errors or unexpected data that indicate successful injection.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying input validation and sanitization on all affected parameters (artid, cid, did, contid, aboutid) in the mod.php file to prevent SQL injection.
If a patch or update is available for eNdonesia Portal 8.7, it should be applied promptly to fix the vulnerability.
As a temporary measure, restrict access to the vulnerable modules or parameters via web application firewall (WAF) rules or network filtering to block malicious payloads.
Monitor logs for suspicious activity targeting these parameters and consider disabling or limiting functionality if immediate patching is not possible.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows unauthenticated attackers to execute arbitrary SQL queries and extract sensitive data such as database credentials and usernames. This exposure of sensitive information can lead to violations of data protection standards and regulations that require safeguarding personal and confidential data.
Specifically, the compromise of confidentiality and integrity of data due to SQL injection could impact compliance with regulations like GDPR and HIPAA, which mandate strict controls over unauthorized access and protection of sensitive information.