CVE-2022-28080 PoC — Royal Event Management System SQL注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28080.yaml

Associated Vulnerability

Title:Royal Event Management System SQL注入漏洞 (CVE-2022-28080)
Description:Event Management是一个事件管理系统。 Royal Event Management System v1.0 版本存在安全漏洞，该漏洞源于通过 todate 参数的 SQL 注入攻击。攻击者利用此漏洞可破坏应用程序、访问或修改数据，或利用基础数据库中的潜在漏洞。

Description

Royal Event is vulnerable to a SQL injection vulnerability.

File Snapshot


 id: CVE-2022-28080

info:
  name: Royal Event - SQL Injection
  author: lucasljm2001,ekrause,ritikch

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!