Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-24731 PoC — WordPress SQL注入漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24731.yaml
Associated Vulnerability
Title:WordPress SQL注入漏洞 (CVE-2021-24731)
Description:WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress 插件 Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes 3.7.1.6之前版本存在SQL注入漏洞，该漏洞源于插件在登录REST API端点的SQL语句中使用用
Description
The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.
File Snapshot

 id: CVE-2021-24731

info:
  name: Pie Register < 3.7.1.6 - SQL Injection
  author: theamanrawat
  se

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.