Dahan JCMS selectx list JSP SQL Injection Scanner

Dahan JCMS is a J2EE-based content management system widely adopted by enterprises for managing content lifecycle processes including collection, creation, delivery, and publishing. It supports diverse applications from corporate websites to intranet portals, enabling organizations to streamline information management and maintain efficient operational workflows. The system's modular architecture allows customization for specific business needs, making it a popular choice for handling sensitive data in production environments.

SQL Injection (SQLi) vulnerability arises when user-supplied input is directly concatenated into SQL queries without proper sanitization or parameterization. In Dahan JCMS, the selectx_list.jsp endpoint fails to validate the ID parameter, allowing attackers to inject malicious SQL statements. This occurs due to insufficient input filtering and lack of prepared statements, enabling union-based attacks that manipulate query logic to extract unauthorized data.

The vulnerable endpoint is selectx_list.jsp located in the workflow module. The ID parameter is directly embedded into SQL queries without escaping or type validation. Attackers can craft payloads like '1 UNION SELECT username,password FROM users--' to retrieve sensitive columns. The vulnerability is exploitable via HTTP GET requests, making it accessible to remote attackers without authentication in some configurations.

Successful exploitation allows attackers to extract entire database contents, including user credentials, personal information, and application data. This can lead to account takeover, data breaches, and further system compromise. With CVSS 7.5, the vulnerability poses significant risk to confidentiality and integrity, potentially enabling attackers to modify or delete critical data, disrupt operations, and escalate privileges within the CMS environment.