CVE-2024-27766

This PoC demonstrates a User-Defined Function (UDF) attack in MariaDB 11.1, allowing arbitrary command execution via a malicious shared library loaded into the database. The exploit leverages the `do_system` function to execute system commands, bypassing security controls.

This repository contains a functional exploit PoC for CVE-2024-27766, demonstrating RCE in MariaDB v11.1 via a malicious UDF. The PoC modifies the original exploit to return command output directly in SQL results using a `char *` return type and `_popen` for command execution.