CVE-2022-0944 PoC — Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Source

https://github.com/Philip-Otter/CVE-2022-0944_RCE_Automation

Associated Vulnerability

Title: Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad (CVE-2022-0944)
Description:Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

Description

PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here:  https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7fb

Readme

I am not the researcher who found the exploit just the author of this code.

This code is intended for educational purposes only.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →