CVE-2021-32789 PoC — WordPress SQL注入漏洞

Description

Authenticated Blind SQL Injection. Wordpress woocommerce plugin versions >= 2.5.0

介绍

# CVE-2021-32789
Authenticated Blind SQL Injection. Wordpress woocommerce plugin versions >= 2.5.0

# Install
```
git clone https://github.com/DonVorrin/CVE-2021-32789.git
cd CVE-2021-32789
sudo pip install -r requirements.txt
```

# Exploit
```
python3 exploit.py
Enter URL: (Example: http://exploit.cve/)

Enter number:
  1 - Output tables                               |
  2 - Output tables + columns                     |
  3 - Output text (need use number tabels)      <- 

The output of a single line from the database is done for convenience.
I recommend to use Web version, generate payload independently.
(See ------FOR BROWSER URL------)
```

文件快照

备注