CVE-2024-11591
📋 TL;DR
This critical SQL injection vulnerability in Beauty Parlour Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'sername' parameter in /admin/add-services.php. Attackers can potentially access, modify, or delete database content. All installations of version 1.0 are affected.
💻 Affected Systems
- 1000 Projects Beauty Parlour Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise leading to data theft, system takeover, or destruction of all business data
Likely Case
Unauthorized data access and potential privilege escalation to admin level
If Mitigated
Limited impact with proper input validation and database permissions
🎯 Exploit Status
Exploit details publicly disclosed on GitHub, making weaponization likely
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://1000projects.org/
Restart Required: No
Instructions:
No official patch available. Consider upgrading to a newer version if available or implementing workarounds.
🔧 Temporary Workarounds
Input Validation Filter
allAdd parameterized queries or input validation to /admin/add-services.php
Modify PHP code to use prepared statements: $stmt = $conn->prepare('INSERT INTO services (name) VALUES (?)'); $stmt->bind_param('s', $sername);
WAF Rule
allImplement web application firewall rules to block SQL injection patterns
Add WAF rule: Detect and block SQL keywords in 'sername' parameter
🧯 If You Can't Patch
- Restrict access to /admin/add-services.php using IP whitelisting or authentication
- Implement database user with minimal privileges for the application
🔍 How to Verify
Check if Vulnerable:
Test /admin/add-services.php with SQL injection payloads in 'sername' parameterCheck Version:
Check system version in admin panel or configuration filesVerify Fix Applied:
Attempt SQL injection after implementing fixes - should return error or no database changes📡 Detection & Monitoring
Log Indicators:
- Unusual SQL errors in application logs
- Multiple failed login attempts after SQL injection attempts
Network Indicators:
- HTTP POST requests to /admin/add-services.php with SQL keywords in parameters
SIEM Query:
source="web_logs" AND uri="/admin/add-services.php" AND (param="sername" AND value MATCHES "(?i)(union|select|insert|delete|drop|--|#)")