CVE-2025-11077 PoC — CampCodes Online Learning Management System SQL注入漏洞

Description

Exploit blind SQL Injection in (Online Learning Management System) 

介绍

# CVE-2025-11077 -  SQL Injection 
**Author: Byte Reaper**

## Description
This vulnerability is a Blind SQL Injection in the add_content.php file of the Online Learning Management System (CVE-2025-11077), allowing an attacker to extract database information by sending crafted POST requests.
## Requirements :
```
Linux x86_64
GCC
```

## Build :
```
	gcc exploit.c argparse.c -o CVE-2025-11077 -lcurl
```
## Run :
```
	- HELP :
	./CVE-2025-11077 -h

	- Target URL (base url)
	./CVE-2025-11077 -u http://[IP]

	- log file :
	./CVE-2025-11077 -f [FILE]

	- Check time-based blind :
    ./CVE-2025-11077 -u http://[IP] -b

    - Cookies FILE :
    ./CVE-2025-11077 -u http://[IP] -c [FILE]
```
## References : 
- NVD : https://nvd.nist.gov/vuln/detail/CVE-2025-11077
- CVE : https://www.cve.org/CVERecord?id=CVE-2025-11077
- Exploit Code : https://bytrep.com/exploit11077.html
## Observation : 
- This is an exploitation taken from the platform https://bytrep.com/

## License : 

MIT

文件快照

备注