CVE-2021-36396
HIGHMoodle - Blind Server-Side Request Forgery via Redirect Handling Bypass
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2021-36396. PoCs published by T0X1Cx.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2021-36396, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit uses a time-based blind SQLi technique to extract database names, usernames, and password hashes from the target system.
Description
In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk.
Exploits (2)
This repository contains a functional Python exploit for CVE-2021-36396, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit uses a time-based blind SQLi technique to extract database names, usernames, and password hashes from the target system.
This repository contains a functional Python exploit for CVE-2021-36396, a time-based SQL injection vulnerability in Moodle's 'sort' parameter. The exploit extracts database names, usernames, and password hashes by leveraging a time-based blind SQLi technique.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N