CVE-2025-11077 PoC — Campcodes Online Learning Management System add_content.php sql injection

Source

Associated Vulnerability

Description

Exploit blind SQL Injection in (Online Learning Management System) 

Readme

# CVE-2025-11077 -  SQL Injection 
**Author: Byte Reaper**

## Description
This vulnerability is a Blind SQL Injection in the add_content.php file of the Online Learning Management System (CVE-2025-11077), allowing an attacker to extract database information by sending crafted POST requests.
## Requirements :
```
Linux x86_64
GCC
```

## Build :
```
	gcc exploit.c argparse.c -o CVE-2025-11077 -lcurl
```
## Run :
```
	- HELP :
	./CVE-2025-11077 -h

	- Target URL (base url)
	./CVE-2025-11077 -u http://[IP]

	- log file :
	./CVE-2025-11077 -f [FILE]

	- Check time-based blind :
    ./CVE-2025-11077 -u http://[IP] -b

    - Cookies FILE :
    ./CVE-2025-11077 -u http://[IP] -c [FILE]
```
## References : 
- NVD : https://nvd.nist.gov/vuln/detail/CVE-2025-11077
- CVE : https://www.cve.org/CVERecord?id=CVE-2025-11077
- Exploit Code : https://bytrep.com/exploit11077.html
## Observation : 
- This is an exploitation taken from the platform https://bytrep.com/

## License : 

MIT

File Snapshot

 [4.0K]  /data/pocs/727cbd36958d015b75bb8091125a64a497213559
├── [ 37K]  exploit.c
├── [1.0K]  LICENSE
└── [1.0K]  README.md

1 directory, 3 files

Remarks