cbcvebase.
CVE-2023-0562
published 2023-01-28

CVE-2023-0562: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality…

PriorityP275critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
44.27%
98.6th percentile
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219716.

Affected

1 ranges
VendorProductVersion rangeFixed in
phpgurukulbank_locker_management_system——

Detection & IOCsextracted from sources · hover to see the quote

path/banker/index.php↗
commandusername=admin%27+AND+4719%3D4719--+GZHh&inputpwd=ABC&login=↗
  • →Detect SQL injection attempt against the Bank Locker Management System login page by matching POST requests to /banker/index.php with a username parameter containing a SQL injection payload (single quote + AND clause + comment sequence). ↗
  • →A successful exploitation response will return HTTP 200 and contain both the string 'admin' and 'BLMS | Dashboard' in the response body, indicating authentication bypass via SQL injection. ↗
  • →The vulnerable parameter is 'username' in the Login component of index.php; monitor POST requests to /banker/index.php with Content-Type: application/x-www-form-urlencoded for SQL metacharacters in the username field. ↗
  • ·The Nuclei template uses a single fixed probe payload (magic number 4719); real-world attackers may use different numeric constants or SQL comment styles, so detection rules should generalize beyond this specific value. ↗
  • ·The template follows redirects before matching; detection at the network layer should account for redirect chains and inspect the final response body for 'BLMS | Dashboard' rather than the initial response. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.