CVE-2022-0739 PoC — BookingPress < 1.0.11 - Unauthenticated SQL Injection

Source

https://github.com/ElGanz0/CVE-2022-0739

Associated Vulnerability

Title: BookingPress < 1.0.11 - Unauthenticated SQL Injection (CVE-2022-0739)
Description:The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

Description

BookingPress < 1.0.11 - Unauthenticated SQL Injection

Readme

# CVE-2022-0739

BookingPress < 1.0.11 - Unauthenticated SQL Injection

The plugin fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query
via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users),
leading to an unauthenticated SQL Injection

CVE-2022-0739

https://plugins.trac.wordpress.org/changeset/2684789

Sources:

https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357

https://github.com/rapid7/metasploit-framework/blob/d48319a867a75cae501cc6797114b511ba0293a4/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb

https://github.com/destr4ct/CVE-2022-0739/blob/main/booking-press-expl.py

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →