CyberRota Analysis
AI-GeneratedThe vulnerability arises in the IOTSmartHome application, specifically within the gui/login.php file, where the checkCookie() function improperly handles the lastLogin cookie, allowing an unauthenticated attacker to inject malicious SQL code through a base64-encoded payload. This flaw enables the attacker to bypass authentication and potentially extract sensitive user data, including credentials, via SQL injection. Organizations utilizing IOTSmartHome should prioritize patching this critical vulnerability to safeguard against unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string.