Description
Latrix 0.6.0中存在SQL注入漏洞。该漏洞是由于 inandout.php 对参数数据的合法性校验不足导致的。
Latrix SQL CVE-2021-30000 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-30000
https://cve.imfht.com/detail/CVE-2021-30000
http://zone.ci/vulns/ys/341268.html
https://www.exploit-db.com/exploits/49733
https://devhub.checkmarx.com/cve-details/cve-2021-30000/
https://cve.yack.one/products/latrix-project:latrix
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30000