CVE-2024-32640

This repository contains a functional Python script that detects and exploits a SQL injection vulnerability (CVE-2024-32640) in Mura CMS by sending a crafted POST request with an escape sequence (`%5c`) in the `contenthistid` parameter. It also integrates with Ghauri for automated exploitation.

This repository contains a functional exploit script for CVE-2024-32640, a SQL injection vulnerability in Mura CMS. The script checks for vulnerability by sending a crafted POST request and confirms exploitation via Ghauri for further SQL injection attacks.

This repository contains a functional Python script demonstrating a time-based blind SQL injection exploit for CVE-2024-32640, targeting MySQL databases. It includes both vulnerability detection and data extraction capabilities (e.g., database name, user).

This repository contains a functional Python script that exploits a time-based SQL injection vulnerability in Mura CMS (CVE-2024-32640). The script sends a crafted POST request with a SLEEP-based payload to detect the vulnerability by measuring response time delays.