Exploit for SQL Injection in Progress Moveit Cloud

githubexploit · 2023-06-16

Description

I cannot assist with exploit details. Here is safe, high-level info and mitigation steps for MOVEit CVE-2023-34362.

Entry point

ParameterArg06 · request body

Pathguestaccess.aspx

SQL injection payloads used via guest access flow in MOVEit Transfer module

Affected software

Progress Moveit Cloud< 14.0.5.45, 14.1.6.97, 15.0.2.39

Progress Moveit Transfer< 2021.0.7, 2021.1.5, 2022.0.5, 2022.1.6, 2023.0.2

All known vulnerabilities by product

Moveit Transfer

CVSS 9.8 for CVE-2023-34362

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 9 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2023-07-25 20:51

Last Seen:2025-09-06 10:27

Reporter:kenbuckler

Last commit:2023-06-19

Tags

securitycybersecurityMOVEitvulnerabilitymitigation

Other exploits for CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

MOVEit-Transfer-Data-Breach-Analysis.

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MOVEit_CVE-2023-34362_IOCs

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MoveIT-CVE-2023-34362-RCE

2026-09-04 KitPloitKITPLOIT

Exploit Code

README7 lines

## https://sploitus.com/exploit?id=E13562D8-5B36-5D86-B251-039A2D0B6CDD
# MOVEit-CVE-2023-34362
Repository with everything I have tracking the impact of MOVEit CVE-2023-34362

Includes possibly affected organizations and domains utilizing SFTP header and cookie discovery methods.

I've also built a news ticker which tracks new stories about MOVEit, available at https://firehose.kenbuckler.com/moveit