Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-36396 PoC — Moodle 代码问题漏洞

Source
Associated Vulnerability
Title:Moodle 代码问题漏洞 (CVE-2021-36396)
Description:Moodle是一套免费、开源的电子学习软件平台,也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle 存在代码问题漏洞,该漏洞源于对用户提供的输入的验证不足。远程攻击者可利用该漏洞绕过cURL被阻止的主机允许的端口限制,欺骗应用程序向任意系统发起请求。受影响的产品及版本如下:Moodle: 3.9.0、3.9.1、3.9.2、3.9.3、3.9.4、3.9.5、3.9.6、3.9.7、3.10.0、3.10.1、3.10.2、3.10.3、3.10.4、3.11、3.11.0
Description
This script demonstrates a time-based blind SQL injection on Moodle platforms, exploiting response delays to extract data.
File Snapshot

None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.