Geoserver-CVE-2023-25157

Geoserver SQL Injection Exploit In this year, a cve got published for Geoserver with the ID CVE-2023-25157. I saw this vulnerability in one of my projects and tried to exploit it. And here it is, the complete exploit. In this repohttps://github.com/0x2458bughunt/CVE-2023-25157 you can use the...

CVE-2023-25157-checker

CVE-2023-25157-checker A script, written in golang. POC for CVE-2023-25157 Steps to use 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Replace with the URL of the target server. Google Dork...

Exploit for SQL Injection in Osgeo Geoserver

Lab CVE-2023-25157 va CVE-2023-25158 Lab nay dung GeoServer/P...

Exploit for SQL Injection in Osgeo Geoserver

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-...

Exploit for SQL Injection in Osgeo Geoserver

CVE-2023-25157-checker A script, written in golang. POC for CV...

Exploit for SQL Injection in Osgeo Geoserver

CVE-2023-25157 This is a simple Python Script to Find the Late...

CVE-2023-25157

GeoServer , an open-source geospatial data server, is vulnerable to SQL injection due to a lack of input filtering in the OGC Filter expression language and CQL (Common Query Language). The vulnerability resides in the CQL Parser & SQL Translator layer, where malformed filter syntax can bypass le...