Description
smanga3.1.9及之前版本存在SQL注入漏洞，此漏洞是由于对用户输入的参数验证不当导致的。
Smanga CVE-2023-36076 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/tdragon6/p/17749469.html
https://avd.aliyun.com/detail?id=AVD-2023-36076
https://stack.chaitin.com/poc/detail/3124
https://developer.aliyun.com/article/1333000
https://cn-sec.com/archives/2013978.html
https://nvd.nist.gov/vuln/detail/CVE-2023-36076
https://app.opencve.io/cve/CVE-2023-36076
https://www.tenable.com/cve/CVE-2023-36076
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-36076
https://github.com/lkw199711/smanga/issues/100
https://gitea.com/Run0nceEx/POC
https://zhuanlan.zhihu.com/p/1932214870562047555
https://blog.csdn.net/u010025272/article/month/2023/12/01
https://security.zone.ci/e/tags/index.php?page=6748&tagname=%E6%83%85%E6%B3%81&line=25&tempid=11
https://www.aliyun.com/sswb/919537.html