Saferman/CVE-2020-7471

PoC

django 漏洞：CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC

view exploit source poc_in_githubauthor Safermanpublished 2020-02-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-7471US	critical9.8	65.6% (99th)	Exploit	2020-02-03
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.