CVE-2022-0944 PoC — sqlpad 代码注入漏洞

Source

Associated Vulnerability

Description

SQLPad - Template injection

Readme

# CVE-2022-0944
SQLPad - Template injection

This is a blind vulnerability, meaning that the output is directly returned in the response.

## Exploit
Use the script with the following command:  
`python3 exploit.py http://localhost:13000 <command>`

## Testing environment
Using docker:
- Start the docker container - `sudo docker run -p 13000:3000 -d --env SQLPAD_ADMIN=admin --env SQLPAD_ADMIN_PASSWORD=password --name vulnerable-sqlpad sqlpad/sqlpad:6.10.0`
- Connect to the docker container - `sudo docker exec -it sqlpad /bin/bash`

To access the web interface, use URL `http://localhost:13000` with credentials `admin:password`.

## Affected versions
<= 6.10.0

## Source
https://huntr.com/bounties/46630727-d923-4444-a421-537ecd63e7fb

File Snapshot

 [4.0K]  /data/pocs/a68a3f854faf65eca3d6128b824c6dd969b77add
├── [ 274]  exploit.py
└── [ 742]  README.md

0 directories, 2 files

Remarks