Back to directory

WRITEUP #2928

Moodle 2nd Order Sqli

SQL Injection

by@mufinnnnnnn(mufinnnnnnn)

Program

Moodle

Published

Mar 2, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://muffsec.com/blog/moodle-2nd-order-sqli/

▸ RELATED WRITEUPS

Directory Traversal, SQL Injection and Server-Side Request Forgery

SQL InjectionPath traversal

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

SQL InjectionReverse engineering

Bypassing airport security via SQL injection

World of SELECT-only PostgreSQL Injections: (Ab)using the filesystem

Exploiting authorization by nonce in WordPress plugins

RCEArbitrary file upload

Built with ❤️ by Shubham Rawat