CVE-2023-37068 PoC — Gym Management System SQL注入漏洞

Source

Associated Vulnerability

Title:Gym Management System SQL注入漏洞 (CVE-2023-37068)
Description:Gym Management System是一个体育馆管理建站系统。该系统由C# 和 sql server 为开发技术，具备客户和供应商管理、产品管理、销售管理、体育馆会员管理、健身评估、系统日志、数据库备份和还原等功能。 Code-Projects Gym Management System V1.0版本存在安全漏洞，该漏洞源于用户在用户名和密码字段中提供的输入验证不足，允许远程攻击者通过登录表单执行任意 SQL 命令，从而导致未经授权的访问和潜在的数据操纵。

Description

CVE-2023-37068, CVE-2023-37069, CVE-2023-37070 Exploits

File Snapshot


 [4.0K]  /data/pocs/2e9abb4e5f3f29324764ece4b6176465487365d3
├── [1.1K]  CVE-2023-37068-Exploit.md
├── [ 948]  CVE-2023-37069-Exploit.md
└── [ 891]  CVE-2023-37070-Exploit.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!