Fortifying Your Website: Essential Website Security Measures

In today's digital age, website security is paramount. This presentation dives into SQL injection in depth for more visit: https://bostoninstituteofanalytics.org/cyber-security-and-ethical-hacking/

1. SQL INJECTION

2. 1 Executive Summary This report outlines a critical security vulnerability discovered in the sngcaskannur education site specifically related to access to admin panel. The vulnerability allows for login into admin panel authentication, potentially exposing sensitive user data and compromising the integrity of the login process. Immediate action is recommended to mitigate this risk.   2 Vulnerability Details Affected System: https://www.sngcaskannur.org Vulnerability Type: SQL INJECTION Impact: Unauthorized access to user accounts, potential data breach, Severity: Critical During testing, it was observed that the admin login verification process in the online education site is susceptible to SQL injecting. the system prompts the user to enter admin panel. However, it was found that by manipulating certain parameters within the request, it is possible to proceed with the admin login process. This flaw undermines the security measures intended to protect user accounts and data, leaving them vulnerable to exploitation.

3. Steps to Reproduce: 1 . Open a https://www.sngcaskannur.org

4. 2.Open login page

5. 3.Enter login credentials username= ' or '1’=‘1 & password= ' or '1'='1 4.enter shown code and login

6. 5.Now Ur in admin panel

7. ACCESS THE ADMIN PANEL

8. Impact • Unauthorized access to user accounts. • Potential exposure of sensitive personal information • Loss of user trust and reputation damage to www.sngcaskannur.org

9. Recommendations 1.Logging and Monitoring : Enable logging of admin panel access and actions taken. monitoring to detect suspicious activities or unauthorized access attempts. 2.Strong Password Policies : Enforce strong password policies such as minimum length, complexity requirements, and regular password changes. 3.Limit Access : Restrict access to the admin panel based on roles and responsibilities. Use the principle of least privilege to grant minimal permissions necessary for each role.

10. POC https://drive.google.com/file/d/1wsTyII2-Sxef5xQPW-RAPrnaTZq3RE8r/view?usp=drive_link

11. Thank You!