CVE-2023-29809

This exploit demonstrates a time-based SQL injection vulnerability in Cmaps v8.0 via the `bookmap` parameter. The PoC uses a sleep-based payload to confirm the vulnerability and suggests using sqlmap for further exploitation.

This repository contains a proof-of-concept for an unauthenticated SQL injection vulnerability in the `bookmap` parameter of the cmaps software. The exploit demonstrates time-based SQL injection using a sleep payload and provides steps to reproduce and dump the database using sqlmap.