mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2025-01-16 12:52:22 +01:00
92 lines
No EOL
3.3 KiB
JSON
92 lines
No EOL
3.3 KiB
JSON
[
|
|
{
|
|
"id": 485285000,
|
|
"name": "CVE-2022-28346",
|
|
"full_name": "YouGina\/CVE-2022-28346",
|
|
"owner": {
|
|
"login": "YouGina",
|
|
"id": 5002624,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5002624?v=4",
|
|
"html_url": "https:\/\/github.com\/YouGina"
|
|
},
|
|
"html_url": "https:\/\/github.com\/YouGina\/CVE-2022-28346",
|
|
"description": "SQL injection in QuerySet.annotate(), aggregate(), and extra()",
|
|
"fork": false,
|
|
"created_at": "2022-04-25T08:27:34Z",
|
|
"updated_at": "2023-07-18T07:41:07Z",
|
|
"pushed_at": "2022-04-25T11:18:12Z",
|
|
"stargazers_count": 1,
|
|
"watchers_count": 1,
|
|
"has_discussions": false,
|
|
"forks_count": 1,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 1,
|
|
"watchers": 1,
|
|
"score": 0,
|
|
"subscribers_count": 1
|
|
},
|
|
{
|
|
"id": 485828921,
|
|
"name": "CVE-2022-28346",
|
|
"full_name": "DeEpinGh0st\/CVE-2022-28346",
|
|
"owner": {
|
|
"login": "DeEpinGh0st",
|
|
"id": 34375573,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34375573?v=4",
|
|
"html_url": "https:\/\/github.com\/DeEpinGh0st"
|
|
},
|
|
"html_url": "https:\/\/github.com\/DeEpinGh0st\/CVE-2022-28346",
|
|
"description": "Django QuerySet.annotate(), aggregate(), extra() SQL 注入",
|
|
"fork": false,
|
|
"created_at": "2022-04-26T14:47:56Z",
|
|
"updated_at": "2023-03-28T13:28:08Z",
|
|
"pushed_at": "2022-05-31T03:28:34Z",
|
|
"stargazers_count": 23,
|
|
"watchers_count": 23,
|
|
"has_discussions": false,
|
|
"forks_count": 5,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 5,
|
|
"watchers": 23,
|
|
"score": 0,
|
|
"subscribers_count": 3
|
|
},
|
|
{
|
|
"id": 609374925,
|
|
"name": "CVE-2022-28346",
|
|
"full_name": "vincentinttsh\/CVE-2022-28346",
|
|
"owner": {
|
|
"login": "vincentinttsh",
|
|
"id": 14941597,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14941597?v=4",
|
|
"html_url": "https:\/\/github.com\/vincentinttsh"
|
|
},
|
|
"html_url": "https:\/\/github.com\/vincentinttsh\/CVE-2022-28346",
|
|
"description": "An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.",
|
|
"fork": false,
|
|
"created_at": "2023-03-04T01:43:58Z",
|
|
"updated_at": "2022-08-24T08:06:59Z",
|
|
"pushed_at": "2022-05-15T00:53:22Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 1
|
|
}
|
|
] |