CVEs-PoC/2021/CVE-2021-34187.md

CVE-2021-34187

Description

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.

POC

Reference

• https://murat.one/?p=118

Github

• https://github.com/20142995/Goby
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/cyb3r-w0lf/nuclei-template-collection