CVE-2015-10034 PoC — j-nowak workout-organizer sql injection

Source

https://github.com/andrenasx/CVE-2015-10034

Associated Vulnerability

Title:j-nowak workout-organizer sql injection (CVE-2015-10034)
Description:A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue. VDB-217714 is the identifier assigned to this vulnerability.

Readme

# CVE-2015-10034

This repository was created for the demonstration of the [J-TAS Action](https://github.com/andrenasx/J-TAS).

The _workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775_ folder contains the vulnerable application related to [CVE-2015-10034](https://nvd.nist.gov/vuln/detail/CVE-2015-10034).

We have included the SARIF file with the results of the analysis performed by the J-TAS Action.

File Snapshot


 [4.0K]  /data/pocs/69c3ae4a708bdd67edf1cfa0dbd761f231893643
├── [ 410]  README.md
├── [ 36K]  results.sarif
└── [4.0K]  workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775
    ├── [ 894]  clear.sql
    ├── [ 14K]  create.sql
    ├── [ 12K]  database.dbs
    ├── [ 71K]  diagram.png
    ├── [4.1M]  poprawki.jpg
    ├── [3.2K]  populate.sql
    ├── [   0]  README.md
    ├── [1.1K]  README.txt
    └── [4.0K]  src
        ├── [9.3K]  activator
        ├── [6.9K]  activator.bat
        ├── [  12]  activator-sbt-echo-akka-shim.sbt
        ├── [4.0K]  app
        │   ├── [4.0K]  controllers
        │   │   ├── [1.7K]  AccountController.java
        │   │   ├── [1.2K]  Application.java
        │   │   ├── [2.2K]  ExercisesController.java
        │   │   ├── [1.3K]  GymsController.java
        │   │   ├── [1.9K]  SignController.java
        │   │   ├── [1.0K]  UsersController.java
        │   │   └── [2.8K]  WorkoutsController.java
        │   ├── [4.0K]  database
        │   │   ├── [4.3K]  ExerciseDao.java
        │   │   ├── [3.6K]  GymsDao.java
        │   │   ├── [1.9K]  NewsDao.java
        │   │   ├── [ 11K]  UsersDao.java
        │   │   └── [5.0K]  WorkoutDao.java
        │   ├── [4.0K]  models
        │   │   ├── [ 677]  Address.java
        │   │   ├── [ 342]  Coordinates.java
        │   │   ├── [1.2K]  Exercise.java
        │   │   ├── [ 499]  ExerciseResult.java
        │   │   ├── [ 936]  Gym.java
        │   │   ├── [ 646]  MuscleGroup.java
        │   │   ├── [2.3K]  News.java
        │   │   ├── [ 393]  Secured.java
        │   │   ├── [ 474]  Stranger.java
        │   │   ├── [1.6K]  User.java
        │   │   ├── [ 857]  WorkoutEntry.java
        │   │   └── [1.6K]  Workout.java
        │   └── [4.0K]  views
        │       ├── [ 894]  account.scala.html
        │       ├── [1.7K]  exercises.scala.html
        │       ├── [ 480]  gym_info.scala.html
        │       ├── [2.0K]  gyms.scala.html
        │       ├── [1.5K]  index.scala.html
        │       ├── [1.4K]  main.scala.html
        │       ├── [ 236]  user_info.scala.html
        │       ├── [ 424]  workouts_index.scala.html
        │       └── [1.1K]  workouts_new.scala.html
        ├── [ 224]  build.sbt
        ├── [4.0K]  conf
        │   └── [2.2K]  routes
        ├── [ 591]  LICENSE
        ├── [4.0K]  project
        │   ├── [  57]  activator-sbt-echo-shim.sbt
        │   ├── [  71]  activator-sbt-eclipse-shim.sbt
        │   ├── [  59]  activator-sbt-idea-shim.sbt
        │   ├── [ 132]  build.properties
        │   └── [ 534]  plugins.sbt
        ├── [4.0K]  public
        │   ├── [4.0K]  html
        │   │   └── [2.4K]  login.html
        │   ├── [4.0K]  images
        │   │   ├── [ 572]  bg_jRatingInfos.png
        │   │   ├── [ 687]  favicon.png
        │   │   ├── [ 427]  small.png
        │   │   └── [1018]  stars.png
        │   ├── [4.0K]  javascripts
        │   │   ├── [ 923]  account_settings.js
        │   │   ├── [1.5K]  home.js
        │   │   ├── [ 82K]  jquery-2.1.3.min.js
        │   │   ├── [7.1K]  jRating.jquery.js
        │   │   ├── [ 869]  login.js
        │   │   ├── [ 258]  navigation.js
        │   │   └── [1.3K]  workouts.js
        │   └── [4.0K]  stylesheets
        │       ├── [ 848]  jRating.jquery.css
        │       ├── [1.5K]  login.css
        │       └── [2.5K]  main.css
        └── [ 148]  README

14 directories, 70 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!