CVE-2019-9053 PoC — CMS Made Simple SQL注入漏洞

Source

https://github.com/Jason-Siu/CVE-2019-9053-Exploit-in-Python-3

Associated Vulnerability

Title: CMS Made Simple SQL注入漏洞 (CVE-2019-9053)
Description:An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

Readme

# CVE-2019-9053-Exploit-in-Python-3

This is an exploit used in [TryHackMe's EasyCTF](https://tryhackme.com/room/easyctf)

However the code that is installed within Kali Linux or going to exploitDB has outdated Python 2 code.

This is a rewrite of that, and some revisions were made when cracking the password's hash, since there was a bug when running with Python 3.

This is so that you can run the EasyCTF the way it's intended to without any errors.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →