Listen to this Post
This vulnerability exists within the `/edittrns.php` file of the Currency Exchange System 1.0. The application fails to properly sanitize user-supplied input passed to the `ID` parameter. An attacker can submit a specially crafted SQL query within this parameter. Because the input is directly concatenated into an SQL statement without validation or prepared statements, the malicious query is executed by the backend database. This allows for classic SQL injection attacks, enabling unauthorized reading, modification, or deletion of database content. The vulnerability is remotely exploitable with no authentication required (PR:N), making it accessible from any network. With publicly available exploit code, attackers can easily target unpatched systems to extract sensitive financial transaction data, user information, or compromise the underlying database server.
Platform: Currency Exchange System
Version: 1.0
Vulnerability: SQL Injection
Severity: MEDIUM
date: 12/08/2025
Prediction: 2026-01-10
What Undercode Say:
curl -s "http://target/edittrns.php?ID=1" | grep -i error sqlmap -u "http://target/edittrns.php?ID=1" --dbs
// Vulnerable line likely similar to: $sql = "SELECT FROM transactions WHERE id=" . $_GET['ID'];
Basic PoC request
import requests
payload = "1 AND 1=CONVERT(int,(SELECT @@version))--"
response = requests.get(f'http://target/edittrns.php?ID={payload}')
How Exploit:
Remote attacker sends crafted SQL payloads in the `ID` parameter of the `/edittrns.php` endpoint to execute arbitrary database commands.
Protection from this CVE:
Apply vendor patch.
Use prepared statements.
Implement input validation.
Deploy WAF rules.
Impact:
Data breach.
Unauthorized data modification.
Full system compromise.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
