6 matches found
CVE-2026-36670
CVE-2026-36670 针对 OpenSIPS 控制面板 的基于时间的盲 SQL 注入利用工具。 此漏洞利用程序利用了 OpenSIPS 中 aliasmanagement.php 模块的一个经过身份验证的 SQL 注入漏洞。table GET 参数未经过正确过滤，允许攻击者注入精心构造的派生表负载。 先决条件 Python 3.x requests 库（pip install requests） 后利用 该漏洞利用程序会转储管理用户的 ha1 哈希值。这些哈希值以 md5username:password 格式存储。你可以使用 hashcat 轻松破解它们：...
EUVD-2026-36748
A Time-Based Blind SQL Injection vulnerability in the aliasmanagement module of OpenSIPS Control Panel opensips-cp prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in aliasmanagement.php...
CVE-2026-36670
A Time-Based Blind SQL Injection vulnerability in the aliasmanagement module of OpenSIPS Control Panel opensips-cp prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in aliasmanagement.php...
PT-2026-49288
Name of the Vulnerable Software and Affected Versions OpenSIPS Control Panel versions prior to 9.3.3 Description A Time-Based Blind SQL Injection in the alias management module allows authenticated attackers to execute arbitrary SQL commands. This occurs via the 'table' GET parameter in the 'alia...
CVE-2026-36670
CVE-2026-36670: Time-based blind SQL injection in the OpenSIPS Control Panel (opensips-cp) alias_management module before version 9.3.3. Authenticated attackers can leverage the table parameter in alias_management.php to execute arbitrary SQL. Connected sources confirm the affected component is O...
