CVE-2023-23488 PoC — WordPress Plugin The Paid Memberships Pro SQL注入漏洞

Source

https://github.com/long-rookie/CVE-2023-23488-PoC

Associated Vulnerability

Title:WordPress Plugin The Paid Memberships Pro SQL注入漏洞 (CVE-2023-23488)
Description:WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin The Paid Memberships Pro 2.9.8 版本之前存在SQL注入漏洞，该漏洞源于 /pmpro/v1/order 的 code 参数存在 SQL 注入问题。

Description

Unauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)

Readme

# CVE-2023-23488-PoC
Unauthenticated SQL Injection - Paid Memberships Pro &lt; 2.9.8 (WordPress Plugin)

Running this script against a WordPress instance with Paid Membership Pro plugin
tells you if the target is vulnerable.
As the SQL injection technique required to exploit it is Time-based blind, instead of
trying to directly exploit the vuln, it will generate the appropriate sqlmap command
to dump the whole database (probably very time-consuming) or specific chose data like
usernames and passwords.

Usage example:

```shell
python3 CVE-2023-23488.py http://127.0.0.1/wordpress
```


## References

+ Credits to **Joshua Martinelle**, who discovered the vulnerability
+ Vendor Homepage: https://www.paidmembershipspro.com
+ Vulnerable software Link: https://downloads.wordpress.org/plugin/paid-memberships-pro.2.9.7.zip
+ Advisory: https://github.com/advisories/GHSA-pppw-hpjp-v2p9

File Snapshot


 [4.0K]  /data/pocs/84ded9ba30f4d4aba4d2924c652fa09bcb0b8390
├── [2.8K]  CVE-2023-23488.py
└── [ 890]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!