CVE-2019-9053

CVE-2019-9053 Daniele Scanu 的 SQL 注入漏洞利用代码改进版 已应用以下更改： 新增时间控制变量 -t 或 --time，允许用户延长 SQL 注入的计时（在主机间网络连接存在数据包传输延迟时有用） 添加网络异常处理：在数据包/连接/响应丢失时重试（原版 Python 会抛出异常，需要重新开始） 在获取哈希/盐值时无需使用完整字典，因为其以十六进制表示，因此使用精简字典 0123456789abcdef 以加快速度 Python3 要求 hashlib.md5 参数必须编码，因此哈希查找函数已相应重写 尽情使用吧！...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 2.2.10 - SQLインジェクション 発見者: Daniele Scanu. 以下で見つけることができます ここ 問題の修正: "File "/home/user/CVE-2019-9053", line 25 root@kitploit: print "+ Specify an url target" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print...?",...

Potential Zip Slip Vulnerability in baserCMS

There is a OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

GHSA-4X2F-54WR-4HJG Potential Zip Slip Vulnerability in baserCMS

There is a OS Command Injection Vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

WordPress Form Maker 1.13.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Form Maker 1.13.3 - SQL Injection Exploit Author: Daniele Scanu @ Certimeter Group Vendor Homepage: https://10web.io/plugins/ Software Link: https://wordpress.org/plugins/form-maker/ Version: 1.13.3 Tested on:...

WordPress Form Maker 1.13.3 SQL Injection

Exploit Title: WordPress Plugin Form Maker 1.13.3 - SQL Injection Date: 22-03-2019 Exploit Author: Daniele Scanu @ Certimeter Group Vendor Homepage: https://10web.io/plugins/ Software Link: https://wordpress.org/plugins/form-maker/ Version: 1.13.3 Tested on: Wordpress 5.1 Description: In the Form...

CMS Made Simple SQL Injection

!/usr/bin/env python Exploit Title: Unauthenticated SQL Injection on CMS Made Simple = 2.2.9 Date: 30-03-2019 Exploit Author: Daniele Scanu @ Certimeter Group Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: https://www.cmsmadesimple.org/downloads/cmsms/ Version: = 2.2.9 Tested on:...