Executive brief
eNdonesia Portal is a web-based content management system used for building community portals. Multiple security flaws allow unauthenticated attackers to gain unauthorized access to the underlying database. This could lead to the exposure of sensitive information, including usernames, database structures, and system version details, potentially compromising the entire website's data.
Technical details
Multiple SQL injection vulnerabilities exist in eNdonesia Portal 8.7 within the 'mod.php' component. The application fails to properly sanitize several GET parameters, including 'artid', 'cid', 'did', 'contid', and 'aboutid', across various modules such as publisher, diskusi, galeri, content, and about. An unauthenticated remote attacker can exploit these flaws by sending specially crafted HTTP requests containing SQL commands. Successful exploitation allows for the extraction of sensitive database information, including the database name, version, and user credentials. Public exploit code (PoC) is available on Exploit-DB.
Affected products
- eNdonesia eNdonesia Portal 8.7
Timeline
- 2018-10-21: disclosed: Initial exploit discovery by Ihsan Sencan
- 2026-05-30: advisory: NVD publication date