CVE-2026-26980

This is a functional SQL injection exploit for Ghost CMS versions 3.24.0 to 6.19.0. It automates the discovery of API endpoints, extracts data via blind SQLi using time-based and error-based techniques, and dumps table contents.

This repository contains a functional exploit for CVE-2026-26980, an unauthenticated blind SQL injection vulnerability in Ghost CMS via the Content API's slug filter ordering mechanism. The exploit includes detailed technical analysis, proof-of-concept code, and a lab setup for validation.

The repository claims to provide an exploit for CVE-2026-26980 but lacks actual exploit code, instead directing users to an external download link. The README contains vague details and no technical analysis.

This repository contains a functional exploit for CVE-2026-26980, demonstrating an unauthenticated SQL injection vulnerability in Ghost CMS's Content API. The PoC extracts sensitive data such as admin emails, names, API keys, and database records using a time-based blind SQLi technique.

This repository contains a functional Python script designed to remove malicious code injections from Ghost CMS posts and pages via the Admin API. It demonstrates the exploitation of CVE-2026-26980 by interacting with the Ghost CMS API to clear injected code in 'codeinjection_head' and 'codeinjection_foot' fields.

This repository contains a functional exploit for CVE-2026-26980, an unauthenticated SQL injection vulnerability in Ghost CMS's Content API. The exploit automates the extraction of arbitrary database records, supporting both SQLite and MySQL backends with multi-threaded extraction.