CVE-2024-9326 PoC — Online Shopping Portal SQL注入漏洞

Source

https://github.com/ghostwirez/CVE-2024-9326-PoC

Associated Vulnerability

Title:Online Shopping Portal SQL注入漏洞 (CVE-2024-9326)
Description:Online Shopping Portal是Anuj Kumar个人开发者的一个开源的在线购物门户。 Online Shopping Portal 2.0版本存在SQL注入漏洞，该漏洞源于Admin Panel组件的/shopping/admin/index.php页面的username参数包含一个SQL注入问题。

Description

This PoC script is designed to verify the presence of CVE-2024-9326, a high SQL Injection vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates the exploitation process to determine if the target web application is vulnerable, allowing security professionals to assess and confirm the flaw's existence.

Readme

# CVE-2024-9326 PoC Exploit Script
This PoC script is designed to verify the presence of CVE-2024-9326, a high SQL Injection vulnerability in PHPGurukul Online Shopping Portal v2.0. It automates the exploitation process to determine if the target web application is vulnerable, allowing security professionals to assess and confirm the flaw's existence.

File Snapshot


 [4.0K]  /data/pocs/04a727b0855ae61708a19f225d807f664d4121aa
├── [1.0K]  LICENSE
├── [ 354]  README.md
└── [3.0K]  sqli_loginExploit.py

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!