Chanjet TPlus SQL Injection Scanner

Chanjet TPlus is an enterprise software solution primarily used by businesses for accounting and financial management. The software is employed by accountants, financial professionals, and organizations looking to streamline their financial operations. It includes various modules that cater to different financial aspects such as invoices, payments, and financial reporting. It is often integrated into larger enterprise systems and may be used in sectors such as retail, manufacturing, and services. The software allows for automation of routine tasks, leading to increased efficiency and accuracy in financial management. Chanjet TPlus is known for its adaptability to different organizational needs and ease of integration with other software.

SQL Injection (SQLi) is a critical security vulnerability that allows attackers to insert malicious SQL queries into input fields to manipulate the database. This vulnerability is often found in web applications that do not correctly sanitize user inputs. SQL Injection can lead to unauthorized access to sensitive information, data corruption, and even database compromise. Attackers exploit this flaw to execute arbitrary SQL code on the database, potentially leading to severe data breaches. It can also provide an opening for further exploitation of the network and systems connected to the affected database. SQLi is a well-known issue due to its effectiveness and ease of implementation by attackers.

Technically, the vulnerability is exploited through a vulnerable endpoint in Chanjet TPlus during the login process. The particular point of concern is a POST request sent to the Ufida.T.SM.Login.UIP.LoginManager,Ufida.T.SM.Login.UIP.ashx handler. The payload designed to exploit the vulnerability leverages the 'AccountNum' parameter. If successful, it can retrieve sensitive hashed values from the database using the SQL 'HASHBYTES' function to generate an MD5 hash. The vulnerability allows for extraction of database content including potentially sensitive user data. As a result, the integrity and confidentiality of the data managed by Chanjet TPlus could be at risk.

If exploited by attackers, the SQL Injection vulnerability could result in severe consequences for organizations using Chanjet TPlus. Sensitive financial data could be exposed, leading to data breaches, financial losses, and reputational damage. Additionally, an attacker gaining access to back-end systems could perform unauthorized transactions or alter financial records. Companies could face compliance violations and penalties if confidential information is compromised. Business operations could be disrupted if critical data is deleted or altered, potentially leading to financial and operational downtime. Continuous exploitation could even lead to persistent backdoor access for attackers in the compromised environment.

REFERENCES

• https://github.com/MrWQ/vulnerability-paper/blob/master/bugs/%E7%95%85%E6%8D%B7%E9%80%9A%20T%2B%20Plus%20%E5%AE%A1%E8%AE%A1%20%EF%BC%88%E8%B6%85%E8%AF%A6%E7%BB%86%EF%BC%89.md