Blogger 301 Redirect <=2.5.3 Unauthenticated Blind SQL Injection (CVE-2024-10645)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br 2. Description: - Describes an SQL injection vulnerability in the Blogger 301 Redirect plugin, which allows an unauthenticated attacker to perform a blind time-based SQL injection attack via the parameter. - Describes the root cause of the vulnerability, including insufficient user input validation and inadequate preparation of SQL queries. 3. CVSS Score: 7.5 (High) 4. Public Release Date: November 15, 2024 5. Last Updated Date: November 16, 2024 6. Researcher: kr0d 7. Affected Versions: <= 2.5.3 8. Vulnerability Type: SQL Injection 9. CVE ID: CVE-2024-10645 10. CVSS Score: 7.5 (High) 11. Public Release Date: November 15, 2024 12. Last Updated Date: November 16, 2024 13. Researcher: kr0d 14. Affected Versions: <= 2.5.3 15. Vulnerability Type: SQL Injection 16. CVE ID: CVE-2024-10645 17. CVSS Score: 7.5 (High) 18. Public Release Date: November 15, 2024 19. Last Updated Date: November 16, 2024 20. Researcher: kr0d 21. Affected Versions: <= 2.5.3 22. Vulnerability Type: SQL Injection 23. CVE ID: CVE-2024-10645 24. CVSS Score: 7.5 (High) 25. Public Release Date: November 15, 2024 26. Last Updated Date: November 16, 2024 27. Researcher: kr0d 28. Affected Versions: <= 2.5.3 29. Vulnerability Type: SQL Injection 30. CVE ID: CVE-2024-10645 31. CVSS Score: 7.5 (High) 32. Public Release Date: November 15, 2024 33. Last Updated Date: November 16, 2024 34. Researcher: kr0d 35. Affected Versions: <= 2.5.3 36. Vulnerability Type: SQL Injection 37. CVE ID: CVE-2024-10645 38. CVSS Score: 7.5 (High) 39. Public Release Date: November 15, 2024 40. Last Updated Date: November 16, 2024 41. Researcher: kr0d 42. Affected Versions: <= 2.5.3 43. Vulnerability Type: SQL Injection 44. CVE ID: CVE-2024-10645 45. CVSS Score: 7.5 (High) 46. Public Release Date: November 15, 2024 47. Last Updated Date: November 16, 2024 48. Researcher: kr0d 49. Affected Versions: <= 2.5.3 50. Vulnerability Type: SQL Injection 51. CVE ID: CVE-2024-10645 52. CVSS Score: 7.5 (High) 53. Public Release Date: November 15, 2024 54. Last Updated Date: November 16, 2024 55. Researcher: kr0d 56. Affected Versions: <= 2.5.3 57. Vulnerability Type: SQL Injection 58. CVE ID: CVE-2024-10645 59. CVSS Score: 7.5 (High) 60. Public Release Date: November 15, 2024 61. Last Updated Date: November 16, 2024 62. Researcher: kr0d 63. Affected Versions: <= 2.5.3 64. Vulnerability Type: SQL Injection 65. CVE ID: CVE-2024-10645 66. CVSS Score: 7.5 (High) 67. Public Release Date: November 15, 2024 68. Last Updated Date: November 16, 2024 69. Researcher: kr0d 70. Affected Versions: <= 2.5.3 71. Vulnerability Type: SQL Injection 72. CVE ID: CVE-2024-10645 73. CVSS Score: 7.5 (High) 74. Public Release Date: November 15, 2024 75. Last Updated Date: November 16, 2024 76. Researcher: kr0d 77. Affected Versions: <= 2.5.3 78. Vulnerability Type: SQL Injection 79. CVE ID: CVE-2024-10645 80. CVSS Score: 7.5 (High) 81. Public Release Date: November 15, 2024 82. Last Updated Date: November 16, 2024 83. Researcher: kr0d 84. Affected Versions: <= 2.5.3 85. Vulnerability Type: SQL Injection 86. CVE ID: CVE-2024-10645 87. CVSS Score: 7.5 (High) 88. Public Release Date: November 15, 2024 89. Last Updated Date: November 16, 2024 90. Researcher: kr0d 91. Affected Versions: <= 2.5.3 92. Vulnerability Type: SQL Injection 93. CVE ID: CVE-2024-10645 94. CVSS Score: 7.5 (High) 95. Public Release Date: November 15, 2024 96. Last Updated Date: November 16, 2024 97. Researcher: kr0d 98. Affected Versions: <= 2.5.3 99. Vulnerability Type: SQL Injection 100. CVE ID: CVE-2024-10645 101. CVSS Score: 7.5 (High) 102. Public Release Date: November 15, 2024 103. Last Updated Date: November 16, 2024 104. Researcher: kr0d 105. Affected Versions: <= 2.5.3 106. Vulnerability Type: SQL Injection 107. CVE ID: CVE-2024-10645 108. CVSS Score: 7.5 (High) 109. Public Release Date: November 15, 2024 110. Last Updated Date: November 16, 2024 111. Researcher: kr0d 112. Affected Versions: <= 2.5.3 113. Vulnerability Type: SQL Injection 114. CVE ID: CVE-2024-10645 115. CVSS Score: 7.5 (High) 116. Public Release Date: November 15, 2024 117. Last Updated Date: November 1

Goal Reached Thanks to every supporter — we hit 100%!

Blogger 301 Redirect <=2.5.3 Unauthenticated Blind SQL Injection (CVE-2024-10645)