CVE-2016-2555 PoC — ATutor SQL注入漏洞

Source

https://github.com/maximilianmarx/atutor-blind-sqli

Associated Vulnerability

Title: ATutor SQL注入漏洞 (CVE-2016-2555)
Description:SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.

Description

Exploiting CVE-2016-2555 enumerating and dumping the underlying Database.

Readme

# ATutor v2.2.1 Blind SQL Injection
Exploiting CVE-2016-2555 enumerating and dumping the underlying Database.

## Disclaimer
All the information provided in this post is for educational purposes only.
You shall not misuse the information to gain unauthorized access and/or write malicious programs.
The author is not responsible for misuse of this information.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →