
Python 3 implementation of a time-based blind SQL injection exploit targeting CVE-2019-9053 in CMS Made Simple 2.2.8, with wordlist-based enumeration.
This code is an implementation of a Time-Based Blind SQL Injection attack in Python 3. The attack is designed to exploit a SQL injection vulnerability in a Content Management System (CMS) Made Simple 2.2.8 through an HTTP request.
Use:
exploit.py -u http://target-uri -w /path-wordlist -c
[1] exploit CMS