CVE-2021-35042 PoC — Django SQL注入漏洞

Source

https://github.com/mrlihd/CVE-2021-35042

Associated Vulnerability

Title:Django SQL注入漏洞 (CVE-2021-35042)
Description:Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django 存在SQL注入漏洞，该漏洞源于未检测的用户输入传递给"QuerySet.order by()"可以在标记为弃用的路径中绕过预期的列引用验证，从而导致潜在的SQL注入。

Description

Reproduce CVE-2021-35042

Readme

# CVE-2021-35042
SQL injection via QuerySet.order_by() untrusted input

# Setup:
Start the instances using: 
`docker-compose up`

Now open the following URL to load sample data:

http://localhost:8000/vul_app/setup

Then go to the vulnerable page at:
http://localhost:8000/vul_app/

Exploit the parameter at:
http://localhost:8000/vul_app/?order_by=name

File Snapshot


 [4.0K]  /data/pocs/cb6144a57e970dc8b044b502a6a82582abe321ac
├── [4.0K]  cve202135042
│   ├── [ 417]  asgi.py
│   ├── [3.8K]  settings.py
│   ├── [ 859]  urls.py
│   └── [ 417]  wsgi.py
├── [ 456]  docker-compose.yml
├── [ 204]  Dockerfile
├── [ 354]  README.md
├── [  37]  requirements.txt
├── [ 185]  setup.sh
└── [4.0K]  vul_app
    ├── [  66]  admin.py
    ├── [ 151]  apps.py
    ├── [ 323]  models.py
    ├── [4.0K]  templates
    │   └── [ 838]  home.html
    ├── [  63]  tests.py
    ├── [ 178]  urls.py
    └── [ 683]  views.py

3 directories, 16 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!