Add CVE-2025-6403 template for School Fees Payment System SQL injection #13791
Conversation
- Detects SQL injection in code-projects School Fees Payment System v1.0 - Vulnerability in /student.php via ID parameter manipulation - Includes union-based, error-based, and time-based detection methods - Complete POC with proper matchers to avoid false positives - Fixes projectdiscovery#13785
- Improved description focusing on POC capabilities - Enhanced union-based detection with proper MD5 verification - Added sophisticated error-based payload using CONCAT/FLOOR - Implemented time-based detection with 12s timeout - Added extractors for hash and error pattern capture - Used modern syntax with proper comments and structure - Follows ProjectDiscovery template best practices
|
@princechaddha please review when you get a chance. Thank you |
|
/cc @DhiyaneshGeek |
- Added verified: true status - Added max-request: 3 count - Added kev: true as mentioned in issue - Added shodan/fofa queries for discovery - Added EPSS scores for completeness - Template now fully complies with ProjectDiscovery standards
|
Hi @rishi-jat, Thank you for participating in the bounty claim. Since the pull request at [projectdiscovery/nuclei-templates#13786](#13786) meets our requirements, we’ll be proceeding with that submission. Therefore, this PR will be closed. |
|
@Akokonunes okay, got it. Please can you tell me the open Bounty issue where i can contribute? Also it's the second time my PR has been close 🙂 one the issue was already fixed but not closed and this one. |
|
Hello @rishi-jat The template bounty is always listed in the issues section of the nuclei-templates repository. you can find them over here :- https://github.com/projectdiscovery/nuclei-templates/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22%F0%9F%92%8E%20Bounty%22 |
2 participants
/clam #13785
Template / PR Information
This template detects a confirmed SQL injection vulnerability in
/student.phpof Code-projects School Fees Payment System v1.0.It includes union-based, error-based, and time-based SQLi checks without relying on version-based detection.
Template Validation
I've validated this template locally?
Validation details:
Tested against a locally hosted vulnerable setup (from
tuooo/CVE).md5(999999999)in response.Additional Details
Shodan Query:
title:"School Fees Payment System"Fofa Query:
title="School Fees Payment System"Matched Response Snippet:
Docker Environment: Tested using vulnerable environment from tuooo/CVE#16
Additional References