Horizon Alert
Summary of the vulnerability and why it matters
A critical SQL injection vulnerability exists in a web application's login function, potentially allowing unauthorized access to sensitive information such as administrator credentials and database details. The issue arises from how specific parameters are handled when users log in.
- Allows unauthorized access to sensitive data.
- Matters for protecting customer and business information.
- Confirm relevance and potential exposure.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by sending specially crafted requests to the login API. The vulnerability exists in the `setwxqyAction` function, which processes `shouji` and `userid` parameters without proper sanitization. This allows an attacker to inject malicious SQL code, potentially leading to the exposure of sensitive data.
- No authentication required.
- Inject malicious SQL via parameters.
- Unauthorized access to sensitive data.
Live Threat
Current exploitation, exposure, and threat context
SQL injection in the login API could expose sensitive system and user data, such as administrator credentials and database structure, when an attacker provides malicious input through the `shouji` and `userid` parameters.
- Administrator accounts and database structure.
- Malicious input via `shouji` and `userid` parameters.
- Unauthorized access to critical information.
Operational Fix
Recommended remediation, mitigation, and detection steps
This SQL injection vulnerability in RockOA affects the login API, potentially exposing sensitive data. Real-world ownership likely falls to the application owners responsible for RockOA, in coordination with infrastructure or platform teams managing its deployment. The first practical step is to identify all instances of RockOA, assess their exposure and criticality, and then confirm the accountable owner to prioritize remediation efforts.
- Application owners must confirm instances.
- Verify external reachability and business criticality.
- Plan remediation based on confirmed risk.
