CVE-2024-44812 PoC — Online Complaint Site 安全漏洞

Source

https://github.com/b1u3st0rm/CVE-2024-44812-PoC

Associated Vulnerability

Title:Online Complaint Site 安全漏洞 (CVE-2024-44812)
Description:SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component.

Description

Proof of Concept Exploit for CVE-2024-44812 - SQL Injection Authentication Bypass vulnerability in Online Complaint Site v1.0

Readme

Proof of Concept Exploit for CVE-2024-44812 - SQL Injection Authentication Bypass vulnerability in Online Complaint Site v1.0

```
# Proof of Concept:

Step 1 – Visit http://localhost/complaintsite/
Step 2 – Click on "admin" button and redirect on login page.
Step 3 – Enter username as ' or 1=1-- - and password as ' or 1=1-- -
Step 4 – Click Login and now you will be logged in as admin.
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!