CVEs-PoC/2018/CVE-2018-10757.md

CVE-2018-10757

Description

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt.

POC

Reference

• https://packetstormsecurity.com/files/147501/cspmysqlum231-sql.txt
• https://www.exploit-db.com/exploits/44589/

Github

No PoCs found on GitHub currently.