A smart home control system injection vulnerability causes your home and my Permissions

A smart home control system injection vulnerability causes your home and my Permissions

On a dark night, you may see lights in your sleep, TV suddenly opens, screens slowly fall, speakers are turned on for no reason, and air conditioners are inexplicably running, there is also a pair of untyped eye monitoring of every action in the family...

The fully-built Smart Home control system does not strictly filter logon ports, leading to xpath injection. You can log on to the background to control various smart home devices.

It can control various SMART lights, air conditioners, televisions, screens, and cameras in the home.

In case of being involved, the family will be completely controlled by others.


 

Use admin 'or '1' = '1 to log on successfully.
 

 

All functions:
 

Control lights and curtains:
 

Control TV, screen, speaker, etc:
 

Control air conditioners, temperature and humidity:
 

 

Control Camera:
 

 

Solution:

Filter