CVEs-PoC/2019/CVE-2019-9053.md

CVE-2019-9053

Description

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

POC

Reference

• http://packetstormsecurity.com/files/152356/CMS-Made-Simple-SQL-Injection.html
• http://packetstormsecurity.com/files/152356/CMS-Made-Simple-SQL-Injection.html
• https://www.exploit-db.com/exploits/46635/
• https://www.exploit-db.com/exploits/46635/

Github

• https://github.com/0xEhab/Code
• https://github.com/0xdc10/simple-ctf-thm
• https://github.com/ARPSyndicate/cvemon
• https://github.com/AfvanMoopen/tryhackme-
• https://github.com/Azrenom/CMSMadeSimple-SQLinjection
• https://github.com/BjarneVerschorre/CVE-2019-9053
• https://github.com/Doc0x1/CVE-2019-9053-Python3
• https://github.com/ELIZEUOPAIN/CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit
• https://github.com/Ehxxb/Code
• https://github.com/FKouhai/simplectf
• https://github.com/Faridbg/THM_Simple_CTF
• https://github.com/GandalfShark/simpleCTF
• https://github.com/H3xL00m/CVE-2019-9053
• https://github.com/Inf0eSec/THM-SimpleCTF
• https://github.com/Jason-Siu/CVE-2019-9053-Exploit-in-Python-3
• https://github.com/Jason-Siu/Jason-Siu
• https://github.com/Mahamedm/CVE-2019-9053-Exploit-Python-3
• https://github.com/Monerza/CMSMadeSimple-SQLinjection
• https://github.com/STERN3L/CVE-2019-9053
• https://github.com/SUNNYSAINI01001/46635.py_CVE-2019-9053
• https://github.com/SaintLukifer/Simple-CTF-walkthrough
• https://github.com/Sp4ceDogy/CVE-2019-9053.python3
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/X-3306/my-all-notes
• https://github.com/bthnrml/guncel-cve-2019-9053.py
• https://github.com/byrek/CVE-2019-9053
• https://github.com/c0d3cr4f73r/CVE-2019-9053
• https://github.com/catsecorg/CatSec-TryHackMe-WriteUps
• https://github.com/cloudkevin/HTB-Writeup
• https://github.com/crypticdante/CVE-2019-9053
• https://github.com/cyberworm-uk/exploits
• https://github.com/davcwikla/CVE-2019-9053-exploit
• https://github.com/e-renna/CVE-2019-9053
• https://github.com/edisonrivera/HackTheBox
• https://github.com/fernandobortotti/CVE-2019-9053
• https://github.com/guest42069/exploits
• https://github.com/im-suman-roy/CVE-2019-9053
• https://github.com/jordansinclair1990/TryHackMeSimpleCTF
• https://github.com/k4u5h41/CVE-2019-9053
• https://github.com/kahluri/CVE-2019-9053
• https://github.com/kaushik-reddy/CVE-s-Working-Exploits
• https://github.com/maraspiras/46635.py
• https://github.com/n3ov4n1sh/CVE-2019-9053
• https://github.com/ompatel11/simplectf
• https://github.com/oplogix/Helpful-Scripts
• https://github.com/pedrojosenavasperez/CVE-2019-9053-Python3
• https://github.com/sefamol/Simple-CTF
• https://github.com/substing/simple_ctf
• https://github.com/tanjiti/sec_profile
• https://github.com/testermas/tryhackme
• https://github.com/tylerthompson1/SimpleCTF
• https://github.com/xtafnull/CMS-made-simple-sqli-python3
• https://github.com/zmiddle/Simple_CMS_SQLi