CVE-2021-36393

Error-based blind SQL injection with bit-shifting approach for Moodle 3.10.4

CVE-2021-36393 Error-based blind SQL injection with bit-shifting approach for Moodle 3104 Allows an attacker to perform arbitrary database queries For example, you can steal: test answers from the database Modify the scriptjs file and run it on route /mod/quiz/attemptphp?attempt=&cmid= user password hashes: (SELECT password FROM mdl_user WHERE id = 2 LIM

This script demonstrates a time-based blind SQL injection on Moodle platforms, exploiting response delays to extract data.

CVE-2021-36393 Exploit Description This repository holds a Python-based exploit targeting CVE-2021-36393, a severe vulnerability found within Moodle's recent courses feature The flaw resides in the 'sort' parameter, enabling SQL injection attacks that can lead to unauthorized database access Rated 98 on the CVSS scale, exploiting this vulnerability requires mi