Cleartext Password Storage in Syllabus-Aligned Learning Management System

Executive Summary

This vulnerability involves multiple security flaws in the Syllabus-Aligned Learning Management & Examination System version 1.0. It includes hardcoded database credentials in the db.php file, plaintext passwords in the cict_portal.sql file, and raw database error messages leaking sensitive system details. The attack can be launched remotely and exploits are publicly available.

Useful 0 Not Useful 0

Detection Guidance

Check for hardcoded credentials in files like db.php or cict_portal.sql. Search for plaintext passwords or empty MySQL root credentials. Inspect error messages in web files for sensitive system details. Use commands like grep -r 'password' /var/www/html/ or cat db.php to review files.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain unauthorized access to the database using hardcoded credentials, exposing sensitive information like student and staff PII, passwords, and system details. This could lead to data breaches, account compromise, and potential further attacks on the system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability violates data protection regulations by exposing real student and staff PII, including names, emails, and school IDs. It also involves cleartext storage of sensitive information, which is non-compliant with GDPR and HIPAA requirements for data security and privacy.

Useful 0 Not Useful 0

Mitigation Strategies

Remove hardcoded credentials from db.php and cict_portal.sql. Replace plaintext passwords with secure hashes. Disable raw database error messages in application files. Restrict database access and update all credentials immediately.

Useful 0 Not Useful 0