🔙 목록으로 돌아가기

CVE-2022-1692: CP Image Store with Slideshow <= 1.0.67 - SQL Injection

TitleCP Image Store with Slideshow <= 1.0.67 - SQL Injection
AuthorShivam Kamboj
SeverityCritical
ImpactUnauthenticated attackers can execute arbitrary SQL commands, potentially leading to data theft, data tampering, or full database compromise.
RemediationUpdate to version 1.0.68 or later.
CVSS Score9.8
EPSS Score0.678
CVE IDCVE-2022-1692
CWE IDCWE-89
Tags cve cve2022 wordpress wp wp-plugin sqli cp-image-store unauth

🔍 Vulnerability Description

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack.

🌐 HTTP Request

GET /?s=codepeople-image-store&post_type=page&feed=rss2 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1692.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-1692.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A