CVE-2019-8979 PoC — Koseven和Kohana SQL注入漏洞

Source

Associated Vulnerability

Title:Koseven和Kohana SQL注入漏洞 (CVE-2019-8979)
Description:Koseven 3.3.9及之前版本和Kohana 3.3.6及之前版本中存在SQL注入漏洞。远程攻击者可利用该漏洞执行SQL命令。

Description

A docker-contained koseven hello world to play with SQL injection CVE-2019-8979 affecting versions < 3.3.10

File Snapshot


 [4.0K]  /data/pocs/f7ced2facb5344baad7bccd8588ee4f3bd75e39e
├── [4.0K]  app
│   ├── [ 560]  apache-vhost.conf
│   ├── [ 758]  Dockerfile
│   ├── [ 634]  initdb.sql
│   └── [4.0K]  src
│       └── [4.0K]  application
│           └── [4.0K]  classes
│               ├── [4.0K]  Controller
│               │   └── [ 675]  Member.php
│               └── [4.0K]  Model
│                   └── [1.3K]  Member.php
├── [ 426]  docker-compose.yml
├── [4.0K]  exploit
│   ├── [ 217]  Dockerfile
│   └── [1.1K]  exploit.py
├── [2.0K]  README.adoc
└── [ 374]  run.sh

7 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!