Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | SQL injection via unsanitized QuerySet.order_by() input | https://github.com/YouGina/CVE-2021-35042 | POC Details |
| 2 | Reproduce CVE-2021-35042 | https://github.com/mrlihd/CVE-2021-35042 | POC Details |
| 3 | None | https://github.com/r4vi/CVE-2021-35042 | POC Details |
| 4 | A basic analysis about CVE-2021-35942. SQL injection in Django. | https://github.com/zer0qs/CVE-2021-35042 | POC Details |
| 5 | Django SQL injection vulnerability | https://github.com/LUUANHDUC/CVE-2021-35042 | POC Details |
| 6 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E5%BC%80%E5%8F%91%E6%A1%86%E6%9E%B6%E6%BC%8F%E6%B4%9E/Django%20QuerySet.order_by%28%29%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CVE-2021-35042.md | POC Details |
| 7 | https://github.com/vulhub/vulhub/blob/master/django/CVE-2021-35042/README.md | POC Details | |
| 8 | Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 contain a SQL injection caused by untrusted input in QuerySet.order_by, letting attackers execute arbitrary SQL commands, exploit requires attacker to control order_by input. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35042.yaml | POC Details |
| 9 | Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 contain a SQL injection caused by untrusted input in QuerySet.order_by. Attackers can execute arbitrary SQL commands if they control order_by input parameters. | https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml | POC Details |
No public POC found.
Login to generate AI POCNo comments yet