一、 漏洞 CVE-2019-9053 基础信息
漏洞信息
# N/A
## 漏洞概述
CMS Made Simple 2.2.8版本中的News模块存在未认证的盲注时间型SQL注入漏洞，攻击者可以通过构造特定的URL，利用`m1_idlist`参数触发该漏洞。
## 影响版本
- CMS Made Simple 2.2.8
## 漏洞细节
攻击者可以通过构造包含恶意`m1_idlist`参数的URL，触发News模块中的盲注时间型SQL注入漏洞。这种攻击不需要认证，因此攻击者可以无需登录系统就能实施攻击。
## 漏洞影响
由于该漏洞是未认证的盲注时间型SQL注入，攻击者可能借此获取敏感信息，如数据库结构、内部数据等，甚至可能进一步控制服务器。
神龙判断
是否为 Web 类漏洞： 是
判断理由：
是。这个漏洞存在于CMS Made Simple 2.2.8版本的News模块中，攻击者可以通过构造特定的URL利用m1_idlist参数实现未认证的基于时间的盲注SQL注入，这属于Web服务端的安全漏洞。
提示
尽管我们采用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！
漏洞标题
N/A
来源：美国国家漏洞数据库 NVD
漏洞描述信息
An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.
来源：美国国家漏洞数据库 NVD
CVSS信息
N/A
来源：美国国家漏洞数据库 NVD
漏洞类别
N/A
来源：美国国家漏洞数据库 NVD
漏洞标题
CMS Made Simple SQL注入漏洞
来源：中国国家信息安全漏洞库 CNNVD
漏洞描述信息
CMS Made Simple（CMSMS）是CMSMS团队的一套开源的内容管理系统(CMS)。该系统支持基于角色的权限管理系统、基于向导的安装与更新机制、智能缓存机制等。 CMSMS 2.2.8版本中存在SQL注入漏洞，该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
来源：中国国家信息安全漏洞库 CNNVD
CVSS信息
N/A
来源：中国国家信息安全漏洞库 CNNVD
漏洞类别
SQL注入
来源：中国国家信息安全漏洞库 CNNVD
二、漏洞 CVE-2019-9053 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | This is modified code of 46635 exploit from python2 to python3. | https://github.com/SUNNYSAINI01001/46635.py_CVE-2019-9053 | POC详情 |
| 2 | None | https://github.com/crypticdante/CVE-2019-9053 | POC详情 |
| 3 | update to Daniele Scanu's SQL Injection Exploit - CVE-2019-9053 | https://github.com/maraspiras/46635.py | POC详情 |
| 4 | CVE-2019-9053 Exploit for Python 3 | https://github.com/e-renna/CVE-2019-9053 | POC详情 |
| 5 | This is a exploit for CVE-2019-9053 | https://github.com/zmiddle/Simple_CMS_SQLi | POC详情 |
| 6 | None | https://github.com/ELIZEUOPAIN/CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit | POC详情 |
| 7 | CVE-2019-9053 exploit ported to python3 | https://github.com/pedrojosenavasperez/CVE-2019-9053-Python3 | POC详情 |
| 8 | CMS Made Simple < 2.2.10 - SQL Injection | https://github.com/STERN3L/CVE-2019-9053 | POC详情 |
| 9 | The exploit is edited to work with different text encodings and Python 3 and is compatible with CMSMS version 2.2.9 and below. | https://github.com/Mahamedm/CVE-2019-9053-Exploit-Python-3 | POC详情 |
| 10 | This is the Updated Python3 exploit for CVE-2019-9053 | https://github.com/im-suman-roy/CVE-2019-9053 | POC详情 |
| 11 | None | https://github.com/bthnrml/guncel-cve-2019-9053.py | POC详情 |
| 12 | Original Exploit Source: https://www.exploit-db.com/exploits/46635 | https://github.com/kahluri/CVE-2019-9053 | POC详情 |
| 13 | Python3 version of the Python2 exploit for CVE-2019-9053 | https://github.com/Doc0x1/CVE-2019-9053-Python3 | POC详情 |
| 14 | This repository has the sole purpose of rewriting the CVE-2019-9053 script, which in the original publication is written in Python 2.7. I will be using Python 3. | https://github.com/fernandobortotti/CVE-2019-9053 | POC详情 |
| 15 | Improved code of Daniele Scanu SQL Injection exploit | https://github.com/byrek/CVE-2019-9053 | POC详情 |
| 16 | working exploit for CVE-2019-9053 | https://github.com/davcwikla/CVE-2019-9053-exploit | POC详情 |
| 17 | None | https://github.com/BjarneVerschorre/CVE-2019-9053 | POC详情 |
| 18 | None | https://github.com/H3xL00m/CVE-2019-9053 | POC详情 |
| 19 | None | https://github.com/n3ov4n1sh/CVE-2019-9053 | POC详情 |
| 20 | None | https://github.com/c0d3cr4f73r/CVE-2019-9053 | POC详情 |
| 21 | None | https://github.com/Jason-Siu/CVE-2019-9053-Exploit-in-Python-3 | POC详情 |
| 22 | CVE-2019-9054 exploit added support for python3 + bug fixes | https://github.com/FedericoTorres233/CVE-2019-9053-Fixed | POC详情 |
| 23 | This script is a modified version of the original exploit by Daniele Scanu which exploits an unauthenticated SQL injection vulnerability in CMS Made Simple <= 2.2.10 (CVE-2019-9053). | https://github.com/Dh4nuJ4/SimpleCTF-UpdatedExploit | POC详情 |
| 24 | The script has been remastered by Teymur Novruzov to ensure compatibility with Python 3. This tool is intended for educational purposes only. Unauthorized use of this tool on any system or network without permission is illegal. The author is not responsible for any misuse of this tool. | https://github.com/TeymurNovruzov/CVE-2019-9053-python3-remastered | POC详情 |
| 25 | None | https://github.com/Sp3c73rSh4d0w/CVE-2019-9053 | POC详情 |
| 26 | None | https://github.com/0xwh1pl4sh/CVE-2019-9053 | POC详情 |
| 27 | None | https://github.com/N3rdyN3xus/CVE-2019-9053 | POC详情 |
| 28 | None | https://github.com/jtoalu/CTF-CVE-2019-9053-GTFOBins | POC详情 |
| 29 | None | https://github.com/Azrenom/CMS-Made-Simple-2.2.9-CVE-2019-9053 | POC详情 |
| 30 | None | https://github.com/NyxByt3/CVE-2019-9053 | POC详情 |
| 31 | None | https://github.com/h3xcr4ck3r/CVE-2019-9053 | POC详情 |
| 32 | CVE-2019-9053 rewritten in python3 to fix broken syntax. Affects CMS made simple <2.2.10 | https://github.com/louisthedonothing/CVE-2019-9053 | POC详情 |
| 33 | None | https://github.com/n3rdh4x0r/CVE-2019-9053 | POC详情 |
| 34 | CMS Made Simple < 2.2.10 - SQL Injection python3 | https://github.com/Yzhacker/CVE-2019-9053-CMS46635-python3 | POC详情 |
| 35 | This exploit targets an unauthenticated SQL injection vulnerability in CMS Made Simple <= 2.2.9 (CVE-2019-9053). It uses a time-based blind SQL injection to extract the username, email, and password hash from the database. Additionally, it supports password cracking using a wordlist. | https://github.com/hf3cyber/CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053- | POC详情 |
| 36 | Unauthenticated SQL injection exploit for CVE-2019-9053 in CMS Made Simple <= 2.2.9. Extracts admin creds with time-based SQLi. | https://github.com/so1icitx/CVE-2019-9053 | POC详情 |
| 37 | None | https://github.com/Threekiii/Awesome-POC/blob/master/CMS%E6%BC%8F%E6%B4%9E/CMS%20Made%20Simple%20%28CMSMS%29%20%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CVE-2019-9053.md | POC详情 |
| 38 | https://github.com/vulhub/vulhub/blob/master/cmsms/CVE-2019-9053/README.md | POC详情 | |
| 39 | CVE-2019-9053. | https://github.com/del0x3/CVE-2019-9053-port-py3 | POC详情 |
| 40 | CMS Made Simple ≤ 2.2.9 SQL Injection Vulnerability CVE-2019-9053 is a vulnerability found in CMS Made Simple (CMSMS) versions up to 2.2.9, where the application is vulnerable to a blind time-based SQL injection | https://github.com/kaizoku73/CVE-2019-9053 | POC详情 |
| 41 | Exploits Python cve-2019-9053– by HackHeart | https://github.com/Hackheart-tech/-exploit-lab | POC详情 |
| 42 | This is modified code of 46635 exploit from python2 to python3. | https://github.com/d3athcod3/46635.py_CVE-2019-9053 | POC详情 |
| 43 | None | https://github.com/h3x0v3rl0rd/CVE-2019-9053 | POC详情 |
| 44 | CVE-2019-9054 exploit added support for python3 + bug fixes | https://github.com/0xftorres/CVE-2019-9053-Fixed | POC详情 |
| 45 | None | https://github.com/Kalidas-7/CVE-2019-9053 | POC详情 |
| 46 | None | https://github.com/noob-hacker572/CMS-Made-Simple-2.2.9-CVE-2019-9053 | POC详情 |
| 47 | This repository contains the corrected code for CVE: 2019-9053 | https://github.com/Slayerma/-CVE-2019-9053 | POC详情 |
| 48 | None | https://github.com/CaelumIsMe/CVE-2019-9053-POC | POC详情 |
| 49 | None | https://github.com/6iroc/CVE-2019-9053 | POC详情 |
| 50 | Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original PoC, improved Python3 version, usage instructions, and lab testing reference. | https://github.com/JagdeepSinghCeh/cms-made-simple-python3 | POC详情 |
| 51 | CMS Made Simple < 2.2.10 - SQL Injection . Actual working version | https://github.com/Perseus99999/CVE-2019-9053-working- | POC详情 |
| 52 | This repository is a complete walkthrough of the Simple CTF challenge on TryHackMe, featuring Nmap scanning, directory enumeration with Gobuster, exploitation of CVE-2019-9053, SSH access, and privilege escalation via sudo permissions. | https://github.com/Praditha29/Simple-CTF-THM-Writeup | POC详情 |
| 53 | None | https://github.com/Boon-Rekcah/CMS-Made-Simple-2.2.9-CVE-2019-9053 | POC详情 |
三、漏洞 CVE-2019-9053 的情报信息
- http://packetstormsecurity.com/files/152356/CMS-Made-Simple-SQL-Injection.htmlx_refsource_MISC
- https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-Spuzzumx_refsource_CONFIRM
- https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwgx_refsource_MISC
标题： CVE-2019-9053-working-/exploit.py at main · Perseus99999/CVE-2019-9053-working- · GitHub -- 🔗来源链接
标签：
神龙速读：### 关键信息 - **漏洞名称**: CVE-2019-9053 - **影响版本**: CMS Made Simple <= 2.2.9 - **漏洞类型**: Unauthenticated SQL Injection - **作者**: Daniele Scanu (@ Certimeter Group) - **更新者**: Shubham P - **厂商主页**: https://www.cmsmadesimple.org/ - **软件链接**: https://www.cmsmadesimple.org/downloads/cmsms/ - **测试环境**: Kali 6.10.11 - **CVE编号**: CVE-2019-9053 (46635) - **修复状态**: 已修复 (版本2.2.9之后) - **建模原理解**: 该漏洞利用了SQL注入来获取数据库中的敏感信息，包括密码、用户名和电子邮件等，特别是利用了时间延迟注入技术来进行盲注攻击。 - **利用步骤**: - 确定目标URL - 调用SQL注入函数（dump_salt、dump_password、dump_username、dump_email）获取敏感信息。 - 试图破解管理员密码（如果有字典文件）。
- https://www.exploit-db.com/exploits/46635/exploitx_refsource_EXPLOIT-DB
- https://nvd.nist.gov/vuln/detail/CVE-2019-9053
四、漏洞 CVE-2019-9053 的评论
暂无评论