关联漏洞
介绍
# CVE-2024-43917
This script demonstrates an SQL injection vulnerability found in the TI WooCommerce Wishlist plugin for WordPress, versions up to 2.8.2 (CVE-2024-43917). The vulnerability allows unauthenticated users to execute arbitrary SQL commands on the website’s database, potentially exposing sensitive information such as usernames and passwords.
Usage
Install the required Python dependencies:
bash
pip install requests
Replace the target_url in the script with the vulnerable site’s URL.
Run the script:
bash
python exploit.py
Disclaimer
This script is for educational purposes only. Use only on systems you have explicit permission to test.
文件快照
[4.0K] /data/pocs/b37246f6df430150b3e99df6845c56a4960f387f
├── [1.8K] CVE-2024-43917.py
└── [ 670] README.md
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。