## Summary
Netartmedia PHP Dating Site contains an unauthenticated SQL injection in loginaction.php via the Email POST parameter. Attackers can use time-based payloads to manipulate database queries and extract sensitive information.
## Technical Details
- Vulnerability class: CWE-89 (SQL Injection)
- Affected endpoint: loginaction.php
- Injection point: Email parameter in a POST request
- Attack technique (from PoC): time-based SQL injection using a conditional sleep()/time comparison pattern to infer database behavior.
- Example PoC request (as described in the reference):
- Target: http://localhost/[PATH]/loginaction.php
- Parameters: Email (crafted payload), Password, lang, mod
- Payload concept: Email=0'XOR(if(now()=sysdate()%2Csleep(0)%2C0))XOR'Z...
## Affected
- Product: Netartmedia Php Dating Site
- Component: loginaction.php
- Parameter: Email (POST)
## Impact
- Confidentiality impact: high (database information exposure)
- Attack prerequisites: network access to the application endpoint
- Privileges required: none (PR:N)
- User interaction: none (UI:N)
## Mitigation
1. Patch/upgrade the affected Netartmedia Php Dating Site components that handle loginaction.php login processing (vendor fix not provided in the references).
2. Replace dynamic SQL construction with parameterized queries for all uses of the Email field.
3. Add server-side input validation and strict type handling for Email before it reaches database logic.
4. Deploy WAF/rules to detect SQLi patterns targeting loginaction.php and the Email parameter (e.g., sleep(, sysdate(), XOR, quote-breaking patterns).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-89