CVE-2023-20110 PoC — Cisco Smart Software Manager On-Prem SQL注入漏洞

Source

https://github.com/redfr0g/CVE-2023-20110

Associated Vulnerability

Title:Cisco Smart Software Manager On-Prem SQL注入漏洞 (CVE-2023-20110)
Description:Cisco Smart Software Manager On-Prem（SSM On-Prem）是美国思科（Cisco）公司的一款用于Cisco产品许可证管理的组件。 Cisco Smart Software Manager On-Prem (SSM On-Prem) 存在安全漏洞，该漏洞源于基于 Web 的管理界面中的漏洞。经过身份验证的远程攻击者利用该漏洞可以对受影响的系统进行 SQL 注入攻击。

Description

PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

Readme

# CVE-2023-20110
PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

## Usage
1. Update IP address and admin cookies in script,
2. Run the script with the following command:
```
python3 exploit.py
```

File Snapshot


 [4.0K]  /data/pocs/7ca4229b9d4b6a4736bbd15d6fbda4bd342fdbd5
├── [1.9K]  exploit.py
├── [ 247]  README.md
└── [ 810]  test.rb

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!