CVE-2024-36837

The repository contains a Python script that scans for SQL injection vulnerability in CRMEB Mall by checking for a specific string in the response. It does not exploit the vulnerability but detects it.

This repository contains a functional exploit for CVE-2024-36837, a SQL injection vulnerability in CRMEB SRM2.0. The exploit leverages a crafted HTTP request to the `/api/products` endpoint to extract data via SQL injection, confirmed by checking for a specific MD5 hash in the response.