CVE-2020-5307

published 2020-01-07

CVE-2020-5307: PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in add-product.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
phpgurukul	dairy_farm_shop_management_system	—	—

Detection & IOCs extracted from sources · hover to see the quote

command username=admin%27+or+%271%27+%3D+%271%27%3B+--+-&password=A&login=↗

path /dfsms/↗

path add-category.php↗

path add-company.php↗

path add-product.php↗

path index.php↗

• → Detect SQLi exploitation attempt against the login page: POST to /dfsms/ with a username parameter containing a classic OR-based SQL injection payload (URL-encoded single quotes and comment sequence). ↗
• → A successful exploitation attempt results in an HTTP 302 redirect with a Location header containing 'add-category.php', indicating authenticated session establishment via SQL injection bypass. ↗
• → Monitor POST requests to /dfsms/ with Content-Type: application/x-www-form-urlencoded containing SQL metacharacters (single quotes, comment sequences '--') in the username field. ↗
• → Additional injectable parameters to monitor beyond the login page: 'category', 'CategoryCode' in add-category.php; 'CompanyName' in add-company.php; 'ProductName', 'ProductPrice' in add-product.php. ↗

• · The Nuclei template targets the base path /dfsms/ — if the application is installed under a different web root or subdirectory, the detection path must be adjusted accordingly. ↗
• · Detection relies on a single POST request (max-request: 1) and a 302 redirect to add-category.php as the success indicator; this may produce false negatives if the application is configured with a non-standard post-login redirect. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89