mirror of
https://github.com/0xMarcio/cve.git
synced 2026-04-21 09:56:14 +02:00
0xMarcio
1.1 KiB
1.1 KiB
CVE-2017-14723
Description
Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks.
POC
Reference
- https://medium.com/websec/wordpress-sqli-bbb2afcc8e94
- https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e
Github
- https://github.com/20142995/nuclei-templates
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Afetter618/WordPress-PenTest
- https://github.com/Byebyesky/IT-Security-Projekt
- https://github.com/CeCe2018/Codepath
- https://github.com/CeCe2018/Codepath-Week-7-Alternative-Assignment-Essay
- https://github.com/Tanvi20/Week-7-Alternative-Assignment-wp-cve