Exploit/Advisories no image

Published on May 25th, 2023 📆 | 6512 Views ⚑


eScan Management Console 14.0.1400.2281 SQL Injection – Torchsec

Convert Text to Speech

# Exploit Title: eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
# Date: 16/05/2023
# Exploit Author: Sahil Ojha
# Vendor Homepage: https://www.escanav.com
# Software Link: https://cl.escanav.com/ewconsole.dll
# Version: 14.0.1400.2281
# Tested on: Windows
# CVE : CVE-2023-31702

*Step of Reproduction/Proof of concept(POC)*

1. Login into the escan management console with a valid username and
password as root user.
2. Navigate to URL:
3. Inject the payload into the UsrId parameter to confirm the SQL
injection as shown below:
DELAY '0:0:5'--&cnt=4176
4. The time delay of 5 seconds confirmed that "UsrId" parameter was
vulnerable to SQL Injection. Furthermore, it was also possible to dump
all the databases and inject OS shell directly into the MS SQL Server
using SQLMap tool.

Source link

Tagged with:

Leave a Reply

Your email address will not be published.