SQL Injection in StudIP

Executive Summary

This is a SQL Injection vulnerability in StudIP versions before 6.0.3 and 5.4.12. It allows remote attackers to execute arbitrary code and access sensitive information through the store() functions due to improper handling of user input in SQL queries.

Useful 0 Not Useful 0

Detection Guidance

Check StudIP versions prior to 6.0.3 or 5.4.12 for vulnerable installations. Use tools like sqlmap to test for SQL injection in StudIP endpoints. Inspect PHP classes handling course admission for improper input handling in SQL queries.

Useful 0 Not Useful 0

Impact Analysis

An authenticated attacker with lecturer or admin privileges can exploit this to extract the entire database, including password hashes, private messages, and student grades. They can also perform denial-of-service attacks or delete data using tools like sqlmap.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and exposure of sensitive personal data, violating GDPR and HIPAA compliance requirements for data protection and security.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade StudIP to version 6.0.3 or 5.4.12 or later immediately. Ensure all PHP classes use parameterized queries instead of string interpolation for SQL queries. Review and restrict access to admin and lecturer accounts.

Useful 0 Not Useful 0