CyberCTF/vulhub-django-cve-2022-34265

PoC

Vulhub django/CVE-2022-34265: Django Trunc and Extract SQL Injection (CVE-2022-34265), run with Isoloom

view exploit source poc_in_githubauthor CyberCTFpublished 2026-10-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-34265US	critical9.8	73.6% (99th)	Exploit	2022-07-04
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a k…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.