CVE-2021-39165 PoC — Github Cachet SQL注入漏洞

Source

Associated Vulnerability

Description

Python3 POC for CVE-2021-39165 in CachetHQ

Readme

# CVE-2021-39165
Python3 POC for CVE-2021-39165 in CachetHQ


# Usage
First of all, you should install the dependencies:

```bash
pip3 install -r requirements.txt
```

If you want to check whether the victim URL is vulnerable or not, you can execute:

```bash
python3 exploit.py -u <URL> -c
```

If you want to know the output of a MySQL query, you can execute:

```bash
python3 exploit.py -u <URL> -q <QUERY>
```

**Note**: You should write a query whose output is a one-liner for the script to work properly :)

You can also check the help panel by typing:

```bash
python3 exploit.py -h
```

File Snapshot

 [4.0K]  /data/pocs/6a9e86d9b76f0ae390ec2e36e850c7600f6dd08d
├── [3.5K]  exploit.py
├── [ 594]  README.md
└── [  27]  requirements.txt

0 directories, 3 files

Remarks