CVE-2025-6346
📋 TL;DR
This vulnerability allows remote attackers to execute SQL injection attacks against the Advance Charity Management System 1.0 by manipulating the 'm06' parameter in the /members/fundDetails.php file. Attackers can potentially access, modify, or delete database content. Organizations using this specific software version are affected.
💻 Affected Systems
- SourceCodester Advance Charity Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise allowing data theft, modification, or deletion, potentially leading to full system takeover if database privileges permit.
Likely Case
Unauthorized data access and extraction of sensitive information from the charity management database.
If Mitigated
Limited impact with proper input validation and database permission restrictions in place.
🎯 Exploit Status
Public exploit code available on GitHub gist, making exploitation straightforward for attackers.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://www.sourcecodester.com/
Restart Required: No
Instructions:
No official patch available. Consider upgrading to newer version if available or implementing workarounds.
🔧 Temporary Workarounds
Input Validation Filter
allAdd parameter validation to filter SQL injection attempts
Modify /members/fundDetails.php to validate and sanitize the 'm06' parameter using prepared statements or parameterized queries
Web Application Firewall Rule
allBlock SQL injection patterns targeting the vulnerable endpoint
Add WAF rule to block requests containing SQL injection patterns to /members/fundDetails.php
🧯 If You Can't Patch
- Restrict network access to the application using firewall rules
- Implement database user privilege restrictions to limit potential damage
🔍 How to Verify
Check if Vulnerable:
Test the /members/fundDetails.php endpoint with SQL injection payloads in the 'm06' parameter and observe database errors or unexpected behavior.Check Version:
Check application version in admin panel or configuration filesVerify Fix Applied:
Test the same SQL injection attempts and verify they are properly rejected or sanitized without database errors.📡 Detection & Monitoring
Log Indicators:
- SQL syntax errors in web server logs
- Unusual database queries from web application user
Network Indicators:
- HTTP requests to /members/fundDetails.php with SQL keywords in parameters
SIEM Query:
source="web_server" AND uri="/members/fundDetails.php" AND (param="m06" AND value CONTAINS "UNION" OR value CONTAINS "SELECT" OR value CONTAINS "OR 1=1")