Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
DjVul_StringAgg — Django StringAgg SQL Injection (CVE-2020-7471) | Kitploit
Tools/GitHubGitHub/secoba/djvul_stringagg
Vulnerability AnalysisCode AnalysisWeb Application ExploitationLearning & EducationDatabase Security
GitHubsecoba/djvul_stringagg

DjVul_StringAgg

Django StringAgg SQL Injection (CVE-2020-7471)

View Repository
2224 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Django CVE-2020-7471 SQLi

CVE-2020-7471: Potential SQL injection via StringAgg(delimiter) django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter.

RUN

root@kitploit:~
python manage.py makemigrations

python manage.py migrate

python manage.py runserver

参考

  • https://www.djangoproject.com/weblog/2020/feb/03/security-releases/
  • https://code.djangoproject.com/ticket/30315
  • https://docs.djangoproject.com/zh-hans/2.2/_modules/django/contrib/postgres/aggregates/general/
Download Tool