CVE-2024-44542 PoC — ToDesk 安全漏洞

Source

https://github.com/alphandbelt/CVE-2024-44542

Associated Vulnerability

Title:ToDesk 安全漏洞 (CVE-2024-44542)
Description:SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.

Readme

# CVE-2024-44542

Description: todesk v1.1 was discovered to contain a SQL injection vulnerability via the title parameter at /todesk.com/news.html.

Vulnerability Type: SQL Injection

Vendor of Product: todesk

Affected Product Version: todesk - v1.1

Affected Component: todesk.com, news.html

Attack Type: Remote

Impact Information Disclosure: True

Attack Vectors: By constructing a specific URL request, an attacker can exploit the SQL injection vulnerability, for example: accessing https://todesk.com/news.html?tag_id=&title=1' AND (SELECT 6268 FROM (SELECT(SLEEP(10)))ghXo) AND 'IKlK'='IKlK.

Date Published: 2024/09/14

File Snapshot


 [4.0K]  /data/pocs/6ceb9b55da73618b3bbe4242444be0ddb432932e
└── [ 629]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!