漏洞描述
Django存在两处SQL注入漏洞。此漏洞是由于对外部输入校验不足导致的。
Django Trunc和Extract功能存在SQL注入漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2022-34265: Django - SQL injection
- POC CVE-2017-12794: Django Debug Page - Cross-Site Scripting
- POC CVE-2018-14574: Django - Open Redirect
- POC CVE-2020-9402: Django SQL Injection
- POC django-framework-exceptions: Django Framework Exceptions
- POC django-secret-key: Django Secret Key Exposure
- POC django-debug-exposure: Django Debug Exposure
- POC django-debug-config-enabled: Django Debug Configuration Enabled
- POC django-debug-enabled: Django Debug mode enabled
- Django应用框架 SQL 注入漏洞
- Django-site-admin /admin/login/ 默认口令漏洞
- Django Json/Hstore Field SQL注入漏洞
- Django至1.10.28/2.2.10/3.0.3 tolerance sql注入漏洞（CVE-2020-9402）