Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE_POC_test — CVE-2019-13086漏洞的复现以及poc实验代码 | Kitploit
Tools/GitHubGitHub/lingchul/cve_poc_test
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationLabs & Practice
GitHublingchul/cve_poc_test

CVE_POC_test

CVE-2019-13086漏洞的复现以及poc实验代码

View Repository
26 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE_POC_test

Reproduction and POC test code for CVE-2019-13086 vulnerability

Original CVE information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13086

Test environment: CSZ CMS architecture + php5.4 + MySQL 5.5 + Apache 2.4

Vulnerability types: SQL injection vulnerability File upload vulnerability

Brief description: In the csrf_show_error function of \cszcms\cszcms\core\MY_Security.php, the User-Agent field of the HTTP packet is not checked for any content before being added to the database query statement. This becomes a point where SQL injection can be constructed.

Defense measures: Of course, promptly modify the source code to add detection of the UA field of the HTTP packet!

Download Tool