CVE-2021-34187 PoC — Chamilo LMS SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34187.yaml

Associated Vulnerability

Title:Chamilo LMS SQL注入漏洞 (CVE-2021-34187)
Description:Chamilo LMS是Chamilo协会的一套开源的在线学习和协作系统。该系统支持创建教学内容、远程培训和在线答题等。 Chamilo存在SQL注入漏洞，该漏洞源于Chamilo的main/inc/ajax/model.ajax.php允许通过searchField、filters或filters2参数进行SQL注入。

Description

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.

File Snapshot


 id: CVE-2021-34187

info:
  name: Chamilo model.ajax.php - SQL Injection
  author: DhiyaneshDK
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!