Listen to this Post
How the CVE Works
The vulnerability in Bacula-web (before v9.7.1) stems from improper input sanitization in HTTP GET requests. An attacker can craft malicious SQL queries through user-controlled parameters, which are then executed directly on the backend database. This allows unauthorized access to sensitive data, modification of database content, or remote code execution. The flaw exists in the web interface’s query-building logic, where unfiltered user input is concatenated into SQL statements. Exploitation requires no authentication, making it highly dangerous in exposed instances.
DailyCVE Form
Platform: Bacula-web
Version: < 9.7.1
Vulnerability: SQL Injection
Severity: High
Date: Jul 30, 2025
Prediction: Patch by Aug 15, 2025
What Undercode Say
SELECT FROM users WHERE id = '1' UNION SELECT 1,2,3--';
curl "http://target/bacula-web/?parameter=1' OR 1=1--"
How Exploit
Craft HTTP GET requests with malicious SQL payloads targeting vulnerable parameters.
Protection from this CVE
Update to v9.7.1+.
Use prepared statements.
Input validation.
Impact
Data theft, RCE, system compromise.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
