CVE-2025-24799

This is a functional exploit for CVE-2025-24799, an unauthenticated SQL injection vulnerability in GLPI. It uses time-based blind SQL injection to extract user credentials from the 'glpi_users' table.

This repository contains a Python-based SQL injection scanner designed to detect CVE-2025-24799 vulnerabilities using time-based SQLi techniques with multithreading. The tool scans URLs for SQLi vulnerabilities by injecting a payload that induces a time delay, confirming vulnerability if the delay exceeds a threshold.

This repository contains a Python-based scanner for detecting SQL injection vulnerability (CVE-2025-24799) in GLPI software. The scanner uses time-based blind SQL injection to test for vulnerability by measuring response delays.

The repository claims to be a PoC for CVE-2025-24799 targeting GLPI with SQL injection, but the main.py file contains obfuscated payloads unrelated to the stated vulnerability, indicating deception.

This Metasploit module exploits an unauthenticated blind boolean SQL injection vulnerability in GLPI's Inventory plugin by sending maliciously crafted XML payloads to dump sensitive data such as usernames and password hashes.