来源

关联漏洞

描述

Wordpress likes and dislikes add-on - SQL Injection

介绍

**Description:**

It is an exploit code that works for multiple urls and multi thread for Unauth Sql Injection on Wp plugin with CVE-2025-5287


**Example usage:**

usage: CVE-2025-5287.py [-h] --file FILE [--fudge FUDGE] [--timeout TIMEOUT] [--threads THREADS] [--proxy PROXY]

Time-Based SQLi Checker (Clean, Threaded, Proxy-Support)

**Optional arguments:**

 **-h, --help**        show this help message and exit

  **--file FILE**       File with base URLs (e.g. http://example.com)
  
  **--fudge FUDGE**    Extra time allowance for delay detection
  
  **--timeout TIMEOUT**  Request timeout in seconds
  
  **--threads THREADS**  Number of concurrent threads
  
  **--proxy PROXY**      Proxy to use (e.g. 5.5.5.5:8080)


  

文件快照

 [4.0K]  /data/pocs/699ab89db4da2771adf8b199513d642843debfe6
├── [3.0K]  CVE-2025-5287.py
└── [ 733]  README.md

0 directories, 2 files

备注