CVE-2023-20110 PoC — Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

Title:Cisco Smart Software Manager On-Prem SQL Injection Vulnerability (CVE-2023-20110)
Description:A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface inadequately validates user input. An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to read sensitive data on the underlying database.

PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

# CVE-2023-20110
PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

## Usage
1. Update IP address and admin cookies in script,
2. Run the script with the following command:
```
python3 exploit.py
```

 [4.0K]  /data/pocs/7ca4229b9d4b6a4736bbd15d6fbda4bd342fdbd5
├── [1.9K]  exploit.py
├── [ 247]  README.md
└── [ 810]  test.rb

0 directories, 3 files