CVE-2020-9483

CVE-2020-9483 PoC of SQL Injection vulCVE-2020-9483,Apache SkyWalking Usage:python3 CVE-2020-9483.py -ip 127.0.0.1 You can use this script to get Database version by SQL Injection Click star if you like this script 如果觉得这个PoC帮助了你，希望能点个star Result： XD...

Exploit for SQL Injection in Apache Skywalking

CVE-2020-9483 PoC of SQL Injection vulCVE-2020-9483,Apache...

CVE-2020-9483

creationtimestamp| type| source ---|---|--- 2021-03-22 13:37:04+00:00| published-proof-of-concept| https://t.me/bhhub/208 2022-09-15 03:15:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3879 2026-09-01 17:00:45+00:00| seen| https://t.me/cissp/3835 2026-09-02...

CVE-2020-9483

Resolved When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to...

CVE-2020-9483

CVE-2020-9483 : A SQL injection in Apache SkyWalking storage when using H2/MySQL/TiDB backends, via a metadata GraphQL query. The root cause is improper SQL parameter handling in the storage implementations (versions 6.0.0–6.6.0 and 7.0.0). This could allow an attacker to access unexpected data b...