nu1l0/cve-2024-46636-sqli-modapsSQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backend SQL queries, potentially leading to unauthorized data access and database compromise.
CVE-2024-46636 is a SQL Injection vulnerability identified in the MODAPS system of NASA EOSDIS, caused by improper input validation in the category parameter. This vulnerability allow attackers to access sensitive data, and execute arbitrary SQL queries through HTTP GET parameter manipulation using techniques such as error-based SQL injection. The affected system includes the MODAPS web application and its backend PostgreSQL database. The issue has been confirmed by the vendor and has been fixed. This repository does not include exploit code or proof-of-concept (PoC). Discovered by Abdulrahman Aldossary. References: https://www.cve.org/CVERecord?id=CVE-2024-46636
