CVE-2022-25322 PoC — ZEROF Web Server SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25322.yaml

Associated Vulnerability

Title:ZEROF Web Server SQL注入漏洞 (CVE-2022-25322)
Description:ZEROF Web Server是开源的一个简化现代Web开发的Web框架。它使您可以构建应用程序而不必担心程序包管理或路由。 ZEROF Web Server存在SQL注入漏洞，该漏洞允许HandleEvent SQL注入。

Description

ZEROF Web Server 2.0 allows SQL Injection via the /HandleEvent endpoint. Attackers can exploit this vulnerability by manipulating the request parameters to execute arbitrary SQL queries.

File Snapshot


 id: CVE-2022-25322

info:
  name: ZEROF Web Server 2.0 - SQL Injection
  author: daffainfo
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!