Description
Mura CMS 是一个功能全面、灵活且用户友好的内容管理系统。2024年5月8日，互联网上披露其存在CVE-2024-32640 Mura CMS processAsyncObject SQL注入漏洞，攻击者可构造恶意请求获取数据库中的敏感信息。
Mura CMS processAsyncObject SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Mura/Mura-CMS-processAsyncObject%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-32640).md
https://www.cnblogs.com/LeouMaster/p/18192441
https://avd.aliyun.com/detail?id=AVD-2024-32640
https://www.aqtd.com/nd.jsp?id=6513
https://cloud.tencent.com/developer/article/2417453
https://security.zone.ci/aliyun/ali_nvd/368986.html
https://www.ddpoc.com/DVB-2024-7086.html
https://qkl.seebug.org/vuldb/ssvid-99835
https://xsx.tw/exploit/3591/
https://gugesay.com/archives/2682
https://cn-sec.com/archives/2725799.html
https://projectdiscovery.io/blog/hacking-apple-with-sql-injection
https://zeropath.com/blog/cve-2024-32640-masa-mura-cms-sql-injection-summary
https://pizzapower.me/2024/11/13/mura-masa-cms-sql-injection-cve-2024-32640/
https://www.tenable.com/plugins/was/114450
https://pentest-tools.com/vulnerabilities-exploits/mura-masa-cms-sql-injection_22659
https://www.acunetix.com/vulnerabilities/web/mura-masa-cms-sqli-cve-2024-32640/