Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-70149-SQL-Injection — Security research project — SQL Injection vulnerability exploitation and mitigation | Kitploit
Tools/GitHubGitHub/anusha-khan29/cve-2025-70149-sql-injection
Vulnerability AnalysisWeb Application ExploitationPenetration TestingLearning & EducationDatabase SecurityLabs & Practice
GitHubanusha-khan29/cve-2025-70149-sql-injection

CVE-2025-70149-SQL-Injection

Security research project — SQL Injection vulnerability exploitation and mitigation

View Repository
132 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-70149 — SQL Injection Research Project

Overview

Security research project demonstrating exploitation and mitigation of CVE-2025-70149, a critical SQL Injection vulnerability (CVSS 9.8/10) in CodeAstro Membership Management System v1.0.

CVE Details

FieldValue
CVE IDCVE-2025-70149
CVSS Score9.8 CRITICAL
TypeSQL Injection (CWE-89)
Auth RequiredNone

Lab Setup

  • Attacker: Kali Linux (192.168.63.5)
  • Victim: Windows 10 + XAMPP (192.168.63.6)
  • Tool: sqlmap 1.10.3

Results

  • Full database dumped remotely
  • 9 member records extracted
  • Admin credentials retrieved
  • MD5 hash cracked

Mitigation Applied

  • PHP Prepared Statements
  • Input Validation
  • Least Privilege DB User
  • Error Handling

MITRE ATT&CK

T1190, T1082, T1005, T1555, M1026, M1027

Disclaimer

This project was conducted in an isolated local environment for academic purposes only.

Download Tool