Django 需授权 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cloud.tencent.com/developer/article/2653882
• https://www.cnblogs.com/hetianlab/p/17412566.html
• https://www.uvsec.com/news/baike/185.html
• https://www.cnblogs.com/BlogVice-2203/p/17003715.html
• https://windeskybb.work/archives/50a4cf97-d02b-4fbb-9cde-795f509fef9a
• https://github.com/SurfRid3r/Django_vulnerability_analysis
• https://www.leavesongs.com/PENETRATION/django-jsonfield-cve-2019-14234.html
• https://www.herodevs.com/blog-posts/cve-2026-1207-sql-injection-in-django-raster-lookups-postgis
• https://www.endorlabs.com/learn/critical-sql-injection-vulnerability-in-django-cve-2025-64459
• https://access.redhat.com/security/cve/cve-2026-1287

Related Vulnerabilities

• PoCCVE-2026-1207: Django RasterField - SQL Injection
• Django 未授权 SQL注入漏洞
• PoCCVE-2022-34265: Django - SQL injection
• PoCCVE-2017-12794: Django Debug Page - Cross-Site Scripting
• PoCCVE-2018-14574: Django - Open Redirect
• PoCCVE-2020-9402: Django SQL Injection
• PoCdjango-framework-exceptions: Django Framework Exceptions
• PoCdjango-secret-key: Django Secret Key Exposure
• PoCdjango-debug-exposure: Django Debug Exposure
• PoCdjango-debug-config-enabled: Django Debug Configuration Enabled
• PoCdjango-debug-enabled: Django Debug mode enabled
• Django应用框架 SQL 注入漏洞