CVE-2024-58290

This exploit demonstrates SQL injection vulnerabilities in the xhibiter NFT marketplace, specifically targeting the 'id' parameter in the collections endpoint. It includes payloads for boolean-based blind, time-based blind, and UNION-based SQL injection techniques.

This repository contains a Python-based Proof of Concept (PoC) for CVE-2024-58290, an unauthenticated SQL Injection vulnerability in Xhibiter NFT Marketplace 1.10.2. The PoC uses a time-based blind SQLi payload to verify the vulnerability by inducing a 5-second delay in the database response.