Description
WeiPHP存在sql注入漏洞，该漏洞是由于bind_follow接口对用户的请求验证不当导致的。
WeiPHP bind_follow CVE-2020-20300 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml
https://nvd.nist.gov/vuln/detail/CVE-2020-20300
https://www.cve.org/CVERecord?id=CVE-2020-20300
https://pentest-tools.com/vulnerabilities-exploits/weiphp-50-sql-injection_22474
https://peiqi.wgpsec.org/wiki/cms/WeiPHP/WeiPHP5.0%20bind_follow%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.html
https://www.cnblogs.com/0kooo-yz/p/18334239
https://y4er.com/posts/weiphp-exp-sql/
https://www.saury.net/878.html
https://www.ddpoc.com/DVB-2023-4637.html