.. / CVE-2024-33288

• SQLi
• PoC
• Nuclei
• Web

Exploit for Prison Management System - SQL Injection Authentication Bypass (CVE-2024-33288)

Description:

SQL injection vulnerability was found on the login page in the Prison Management System, which allows attackers to bypass authentication.

Affected Products:

• Prison Management System (specific versions not detailed, assume current until verified)

Nuclei Template

View the template here CVE-2024-33288.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-33288.yaml

References: