Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xp_cmdshell RCE — Detect

Fingerprint / reachability check for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

Inflectra SpiraTeam PlanningBoard yAxisKey SQLi RCE

Authenticated PlanningBoardMoveItems yAxisKey SQL injection reaches REQUIREMENTRETRIEVECUSTOM EXEC@SQL and xpcmdshell Windows. !/usr/bin/env python3 -- coding: utf-8 -- """Inflectra SpiraTeam PlanningBoard yAxisKey SQLi to xpcmdshell RCE.""" from future import annotations import json import re...