Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2025-70149-SQL-Injection — Security research project — SQL Injection vulnerability exploitation and mitigation | Kitploit

Tools/

GitHub/anusha-khan29/cve-2025-70149-sql-injection

Vulnerability Analysis Web Application Exploitation Penetration Testing Learning & Education Database Security Labs & Practice

anusha-khan29/cve-2025-70149-sql-injection

CVE-2025-70149-SQL-Injection

Security research project — SQL Injection vulnerability exploitation and mitigation

View Repository

21 month ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Overview

Security research project demonstrating exploitation and mitigation of CVE-2025-70149, a critical SQL Injection vulnerability (CVSS 9.8/10) in CodeAstro Membership Management System v1.0.

CVE Details

Field	Value

CVE ID	CVE-2025-70149
CVSS Score	9.8 CRITICAL
Type	SQL Injection (CWE-89)
Auth Required	None

Lab Setup

Attacker: Kali Linux (192.168.63.5)
Victim: Windows 10 + XAMPP (192.168.63.6)
Tool: sqlmap 1.10.3

Results

Full database dumped remotely
9 member records extracted
Admin credentials retrieved
MD5 hash cracked

Mitigation Applied

PHP Prepared Statements
Input Validation
Least Privilege DB User
Error Handling

MITRE ATT&CK

T1190, T1082, T1005, T1555, M1026, M1027

Disclaimer

This project was conducted in an isolated local environment for academic purposes only.

Download Tool