Django 未授权 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cloud.tencent.com/developer/article/2592963
• https://www.cnblogs.com/BlogVice-2203/p/17003715.html
• https://windeskybb.work/archives/50a4cf97-d02b-4fbb-9cde-795f509fef9a
• https://www.endorlabs.com/learn/critical-sql-injection-vulnerability-in-django-cve-2025-64459
• https://www.cnblogs.com/hetianlab/p/17412566.html
• https://www.leavesongs.com/PENETRATION/django-jsonfield-cve-2019-14234.html
• https://developer.baidu.com/article/details/2791855
• https://cloud.tencent.com/developer/article/2242442
• https://www.cycognito.com/blog/emerging-threat-django-sql-injection-vulnerability-cve-2025-64459/
• https://nvd.nist.gov/vuln/detail/CVE-2025-57833
• https://github.com/advisories/GHSA-6w2r-r2m5-xq5w
• https://www.djangoproject.com/weblog/2025/nov/05/security-releases/

Related Vulnerabilities

• PoCCVE-2026-1207: Django RasterField - SQL Injection
• Django 需授权 SQL注入漏洞
• PoCCVE-2022-34265: Django - SQL injection
• PoCCVE-2017-12794: Django Debug Page - Cross-Site Scripting
• PoCCVE-2018-14574: Django - Open Redirect
• PoCCVE-2020-9402: Django SQL Injection
• PoCdjango-framework-exceptions: Django Framework Exceptions
• PoCdjango-secret-key: Django Secret Key Exposure
• PoCdjango-debug-exposure: Django Debug Exposure
• PoCdjango-debug-config-enabled: Django Debug Configuration Enabled
• PoCdjango-debug-enabled: Django Debug mode enabled
• Django应用框架 SQL 注入漏洞