CVE-2019-9053 PoC — CMS Made Simple SQL注入漏洞

Description

This repository has the sole purpose of rewriting the CVE-2019-9053 script, which in the original publication is written in Python 2.7. I will be using Python 3.

介绍

# CVE 2019-9053

## Detail

### Description

This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System (CMS) Made Simple 2.2.8 through an HTTP request.

### Exploit

Use:

```python
exploit.py -u http://target-uri -w /path-wordlist -c
```

## references
[1] [exploit CMS](https://www.exploit-db.com/exploits/46635)

文件快照

备注