CVE-2015-10034 PoC — workout-organizer SQL注入漏洞

Source

https://github.com/andrenasx/CVE-2015-10034

Associated Vulnerability

Title:workout-organizer SQL注入漏洞 (CVE-2015-10034)
Description:workout-organizer是Jakub Nowak个人开发者的一个应用程序。 workout-organizer存在SQL注入漏洞，该漏洞源于未知代码，操作导致SQL注入。

Readme

# CVE-2015-10034

This repository was created for the demonstration of the [J-TAS Action](https://github.com/andrenasx/J-TAS).

The _workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775_ folder contains the vulnerable application related to [CVE-2015-10034](https://nvd.nist.gov/vuln/detail/CVE-2015-10034).

We have included the SARIF file with the results of the analysis performed by the J-TAS Action.

File Snapshot


 [4.0K]  /data/pocs/69c3ae4a708bdd67edf1cfa0dbd761f231893643
├── [ 410]  README.md
├── [ 36K]  results.sarif
└── [4.0K]  workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775
    ├── [ 894]  clear.sql
    ├── [ 14K]  create.sql
    ├── [ 12K]  database.dbs
    ├── [ 71K]  diagram.png
    ├── [4.1M]  poprawki.jpg
    ├── [3.2K]  populate.sql
    ├── [   0]  README.md
    ├── [1.1K]  README.txt
    └── [4.0K]  src
        ├── [9.3K]  activator
        ├── [6.9K]  activator.bat
        ├── [  12]  activator-sbt-echo-akka-shim.sbt
        ├── [4.0K]  app
        │   ├── [4.0K]  controllers
        │   │   ├── [1.7K]  AccountController.java
        │   │   ├── [1.2K]  Application.java
        │   │   ├── [2.2K]  ExercisesController.java
        │   │   ├── [1.3K]  GymsController.java
        │   │   ├── [1.9K]  SignController.java
        │   │   ├── [1.0K]  UsersController.java
        │   │   └── [2.8K]  WorkoutsController.java
        │   ├── [4.0K]  database
        │   │   ├── [4.3K]  ExerciseDao.java
        │   │   ├── [3.6K]  GymsDao.java
        │   │   ├── [1.9K]  NewsDao.java
        │   │   ├── [ 11K]  UsersDao.java
        │   │   └── [5.0K]  WorkoutDao.java
        │   ├── [4.0K]  models
        │   │   ├── [ 677]  Address.java
        │   │   ├── [ 342]  Coordinates.java
        │   │   ├── [1.2K]  Exercise.java
        │   │   ├── [ 499]  ExerciseResult.java
        │   │   ├── [ 936]  Gym.java
        │   │   ├── [ 646]  MuscleGroup.java
        │   │   ├── [2.3K]  News.java
        │   │   ├── [ 393]  Secured.java
        │   │   ├── [ 474]  Stranger.java
        │   │   ├── [1.6K]  User.java
        │   │   ├── [ 857]  WorkoutEntry.java
        │   │   └── [1.6K]  Workout.java
        │   └── [4.0K]  views
        │       ├── [ 894]  account.scala.html
        │       ├── [1.7K]  exercises.scala.html
        │       ├── [ 480]  gym_info.scala.html
        │       ├── [2.0K]  gyms.scala.html
        │       ├── [1.5K]  index.scala.html
        │       ├── [1.4K]  main.scala.html
        │       ├── [ 236]  user_info.scala.html
        │       ├── [ 424]  workouts_index.scala.html
        │       └── [1.1K]  workouts_new.scala.html
        ├── [ 224]  build.sbt
        ├── [4.0K]  conf
        │   └── [2.2K]  routes
        ├── [ 591]  LICENSE
        ├── [4.0K]  project
        │   ├── [  57]  activator-sbt-echo-shim.sbt
        │   ├── [  71]  activator-sbt-eclipse-shim.sbt
        │   ├── [  59]  activator-sbt-idea-shim.sbt
        │   ├── [ 132]  build.properties
        │   └── [ 534]  plugins.sbt
        ├── [4.0K]  public
        │   ├── [4.0K]  html
        │   │   └── [2.4K]  login.html
        │   ├── [4.0K]  images
        │   │   ├── [ 572]  bg_jRatingInfos.png
        │   │   ├── [ 687]  favicon.png
        │   │   ├── [ 427]  small.png
        │   │   └── [1018]  stars.png
        │   ├── [4.0K]  javascripts
        │   │   ├── [ 923]  account_settings.js
        │   │   ├── [1.5K]  home.js
        │   │   ├── [ 82K]  jquery-2.1.3.min.js
        │   │   ├── [7.1K]  jRating.jquery.js
        │   │   ├── [ 869]  login.js
        │   │   ├── [ 258]  navigation.js
        │   │   └── [1.3K]  workouts.js
        │   └── [4.0K]  stylesheets
        │       ├── [ 848]  jRating.jquery.css
        │       ├── [1.5K]  login.css
        │       └── [2.5K]  main.css
        └── [ 148]  README

14 directories, 70 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!