imthoe/cve-2019-14314CVE-2019-14314용 Python 익스플로잇: NextGEN Gallery 3.2.10 WordPress 플러그인의 인증된 SQL 주입으로 데이터베이스에서 비밀번호 해시를 추출합니다.
CVE-2019-14314 - NextGEN Gallery 3.2.10 인증된 SQL 인젝션
usage: cve_2019_14314.py [-h] url login_user login_pass username
CVE-2019-14314 Hash Extractor
positional arguments:
url Wordpress blog URL
login_user Username to login with
login_pass Password to login with
username Username to extract Password Hash from
optional arguments:
-h, --help show this help message and exit
출처: https://www.fortinet.com/blog/threat-research/wordpress-plugin-sql-injection-vulnerability.html