Exploit for MOVEit-Transfer-Data-Breach-Analysis.

kitploit · 2026-08-27

Description

Unauthenticated SQL injection in MOVEit Transfer (CVE-2023-34362) breached 2,700+ organizations.

Entry point

ParameterArg06 · request body

Pathguestaccess.aspx

SQL injection payloads used via guest access flow in MOVEit Transfer module

Affected software

Progress Moveit Cloud< 14.0.5.45, 14.1.6.97, 15.0.2.39

Progress Moveit Transfer< 2021.0.7, 2021.1.5, 2022.0.5, 2022.1.6, 2023.0.2

All known vulnerabilities by product

Moveit Transfer

CVSS 9.8 for CVE-2023-34362

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-27 03:51

Last Seen:2026-08-27 20:20

Reporter:KitPloit

Tags

MOVEit TransferSQL injectionunauthenticateddata breachCVE-2023-343622,700 organizations

Other exploits for CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

MOVEit_CVE-2023-34362_IOCs

2026-09-04 KitPloitKITPLOIT

MoveIT-CVE-2023-34362-RCE

2026-09-04 KitPloitKITPLOIT

MOVEit-CVE-2023-34362

2026-09-03 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TUBAAIFTIKHAR-UI-MOVEIT-TRANSFER-DATA-BREACH-ANALYSIS.
# MOVEit-Transfer-Data-Breach-Analysis.

Подробный анализ утечки данных MOVEit Transfer 2023 года (CVE-2023-34362) для CS50 Cybersecurity. Этот проект исследует техническое влияние неаутентифицированной SQL-инъекции и её последствия для глобальной конфиденциальности данных, затронув более 2,700+ организаций. Особая благодарность профессору David J. Malan и сотрудникам CS50.