.. / CVE-2020-36112

• SQLi
• Nuclei
• Web

Exploit for CSE Bookstore 1.0 - SQL Injection (CVE-2020-36112)

Description:

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database.

Nuclei Template

View the template here CVE-2020-36112.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-36112.yaml

References: