CVE-2019-9053-exploit

CVE-2019-9053 — Unauthenticated SQL Injection in CMS Made Simple Description CVE-2019-9053 is a time-based blind SQL injection vulnerability affecting CMS Made Simple versions ≤ 2.2.9. It does not require authentication. The vulnerable parameter is m1idlist in the News module moduleinterface.php...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection Educational PoC in Python 3 for CVE-2019-9053, a time-based blind SQL Injection vulnerability in CMS Made Simple = 2.2.9. This version has been modified for use in CTF/lab environments. It includes pre-configured prefixes to reduce extraction time...

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

CMS Made Simple CVE-2019-9053 time-based SQLi

CVE-2019-9053 CMSMS = 2.2.9: unauthenticated time-based blind SQLi in moduleinterface.php News m1idlist extracts admin hash. !/usr/bin/env python3 -- coding: utf-8 -- """CMS Made Simple CVE-2019-9053 unauthenticated time-based SQLi.""" from future import annotations import hashlib import time fro...

CMS Made Simple CVE-2019-9053 SQLi Detect

Time-based blind SQLi on moduleinterface.php News m1idlist. !/usr/bin/env python3 -- coding: utf-8 -- """CMS Made Simple CVE-2019-9053 time-based SQLi detection.""" from future import annotations import time from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Exploit-CMS-made-simple

Exploit-CMS-made-simple Ele explora uma vulnerabilidade sqli d...

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 !Pyt...

CVE-2019-9053: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1idlist parameter...