CVE-2026-42167

The repository contains functional exploit code for CVE-2026-42167, a SQL injection vulnerability in ProFTPD's mod_sql logging pipeline. It includes multiple PoCs demonstrating pre-auth and post-auth exploitation paths, including backdoor user injection and remote code execution via PostgreSQL's COPY TO PROGRAM.

The repository contains functional exploit code for CVE-2026-42167, demonstrating SQL injection via STOR filename in ProFTPD with PostgreSQL backend. It includes PoCs for backdoor user creation, RCE via COPY TO PROGRAM, and blind data exfiltration.

This repository provides a detailed technical analysis of CVE-2026-42167, a SQL injection vulnerability in ProFTPD's mod_sql module, including root cause analysis, exploitation techniques, and mitigation strategies. It includes a comprehensive breakdown of the vulnerability's impact, affected versions, and proof-of-concept usage guidelines.

This repository contains a functional exploit for CVE-2026-42167, an SQL injection vulnerability in ProFTPD's mod_sql module. The exploit demonstrates both backdoor user injection and remote code execution via SQL injection through the USER command, bypassing authentication.

This repository contains a functional exploit for CVE-2026-42167, targeting a SQL injection vulnerability in ProFTPD's mod_sql module. The exploit leverages a logical flaw in the is_escaped_text() function to perform unauthenticated SQL injection and exfiltrate files using time-based attacks.

This repository contains a functional exploit for CVE-2026-42167, demonstrating a pre-authentication RCE in ProFTPD via SQL injection in the mod_sql module. The exploit leverages PostgreSQL's COPY TO PROGRAM directive to exfiltrate file contents or establish a reverse shell.

This repository contains functional exploit code for CVE-2026-42167, a SQL injection vulnerability in ProFTPD's mod_sql module. The PoC demonstrates unauthenticated RCE and auth bypass via crafted USER and STOR commands, leveraging a flawed is_escaped_text() heuristic.

The repository contains functional exploit code demonstrating CVE-2026-42167, a SQL injection vulnerability in ProFTPD's mod_sql logging pipeline. The PoCs leverage a bypass in the is_escaped_text() function to execute arbitrary SQL queries, enabling backdoor user injection and remote code execution via PostgreSQL's COPY TO PROGRAM feature.