CVE-2019-9053 PoC — CMS Made Simple SQL注入漏洞

Source

Associated Vulnerability

Description

This repository has the sole purpose of rewriting the CVE-2019-9053 script, which in the original publication is written in Python 2.7. I will be using Python 3.

Readme

# CVE 2019-9053

## Detail

### Description

This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System (CMS) Made Simple 2.2.8 through an HTTP request.

### Exploit

Use:

```python
exploit.py -u http://target-uri -w /path-wordlist -c
```

## references
[1] [exploit CMS](https://www.exploit-db.com/exploits/46635)

File Snapshot

 [4.0K]  /data/pocs/6564729629dde4ffcb01a62a4ecff6c6e58a1134
├── [5.8K]  exploit-cve-2019-9053.py
└── [ 439]  README.md

0 directories, 2 files

Remarks