SQL Injection in WP-PageNavi < 3.8.0 with POC

漏洞概述 该漏洞涉及WordPress插件“WP-PageNavi”在版本3.8.0之前存在SQL注入漏洞。攻击者可以通过构造特定的URL请求，利用该漏洞执行任意SQL命令，从而可能获取敏感数据或控制数据库。 影响范围 插件名称: WP-PageNavi 受影响版本: 3.8.0 之前的所有版本 影响组件: 文件中的 函数 修复方案 升级插件: 将WP-PageNavi插件升级到3.8.0或更高版本。 临时缓解措施: 如果无法立即升级，可以禁用该插件或限制其使用权限。 POC代码 ```php <?php // 示例POC代码 $url = "http://example.com/?paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=ASC&post_type=any&posts_per_page=10&paged=1&orderby=1&order=A

Goal Reached Thanks to every supporter — we hit 100%!

SQL Injection in WP-PageNavi < 3.8.0 with POC

More from this source