20 matches found
CVE-2023-31714
CVE-2023-31714 - Chitor-CMS 1.1.2 事前認証SQLインジェクション msd0pe によって発見 https://github.com/waqaskanju/Chitor-CMS プロジェクト: waqaskanju chitor1.1.py 69d3442 コミット以降パッチ適用 2023/04/13 SQLインジェクションが /editschool.php?id= エンドポイントで発見されました。認証は必要ありません。 chitor1.0.py 5f76192 コミット以降、認証後SQLインジェクションに変更 2023/04/09 SQLインジェクション...
EUVD-2023-36009
Malicious code in bioql PyPI...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
Sql injection
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
Chitor CMS SQL注入漏洞
Chitor CMS is a school management system by the individual developer Waqas Ahmad. Chitor CMS version prior to v1.1.2 suffers from a SQL injection vulnerability, which can be exploited by an attacker to perform SQL injection...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
CVE-2023-31714
Chitor-CMS before v1.1.2 contains multiple SQL injection vulnerabilities in input-handling endpoints (e.g., /edit_school.php?id=, /add_school_class.php?school=). Root cause: insufficient input sanitization in SQL queries, enabling unauthorized data access/manipulation. Impact: high confidentialit...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
PT-2023-23428 · Unknown · Chitor-Cms
Name of the Vulnerable Software and Affected Versions: Chitor-CMS versions prior to 1.1.2 Description: The issue is related to multiple SQL injection vulnerabilities. Recommendations: For versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue...
CVE-2023-31714
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
CVE-2023-31714: Improper Neutralization of Special Elements used in an SQL Command
Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities...
Chitor CMS 1.1.2 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Chitor CMS 1.1.2 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Chitor-CMS 1.1.2 SQL Injection
!/usr/bin/python3 Exploit Title: Chitor-CMS v1.1.2 - Pre-Auth SQL Injection Date: 2023/04/13 ExploitAuthor: msd0pe Project: https://github.com/waqaskanju/Chitor-CMS My Github: https://github.com/msd0pe-1 Patched the 2023/04/16: 69d3442 commit description = 'Chitor-CMS 1.1.2 Pre-Auth SQL Injection...
Chitor-CMS v1.1.2 - Pre-Auth SQL Injection Exploit
!/usr/bin/python3 Exploit Title: Chitor-CMS v1.1.2 - Pre-Auth SQL Injection Date: 2023/04/13 ExploitAuthor: msd0pe Project: https://github.com/waqaskanju/Chitor-CMS My Github: https://github.com/msd0pe-1 Patched the 2023/04/16: 69d3442 commit description = 'Chitor-CMS 1.1.2 Pre-Auth SQL Injection...
Chitor-CMS v1.1.2 - Pre-Auth SQL Injection
!/usr/bin/python3 Exploit Title: Chitor-CMS v1.1.2 - Pre-Auth SQL Injection Date: 2023/04/13 ExploitAuthor: msd0pe Project: https://github.com/waqaskanju/Chitor-CMS My Github: https://github.com/msd0pe-1 Patched the 2023/04/16: 69d3442 commit description = 'Chitor-CMS 1.1.2 Pre-Auth SQL Injection...
