Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-34265 PoC — Django SQL注入漏洞

Source
https://github.com/vulhub/vulhub/blob/master/django/CVE-2022-34265/README.md
Associated Vulnerability
Title:Django SQL注入漏洞 (CVE-2022-34265)
Description:Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django 3.2.14 版本之前 3.2 版本和 4.0.6 版本之前的 4.0 版本存在SQL注入漏洞，该漏洞源于如果将不受信任的数据用作 kind/lookup_name 值，则 Trunc() 和 Extract() 数据库函数会受到 SQL 注入的影响。
File Snapshot

 # Django Trunc(kind) and Extract(lookup_name) SQL Injection (CVE-2022-34265)

[中文版本(Chinese version)

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.