CVEs-PoC/2021/CVE-2021-24786.md

CVE-2021-24786

Description

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

POC

Reference

• https://wpscan.com/vulnerability/a6571f16-66d2-449e-af83-1c6ddd56edfa

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Enes4xd/Enes4xd
• https://github.com/Hacker5preme/Exploits
• https://github.com/cr0ss2018/cr0ss2018
• https://github.com/ezelnur6327/Enes4xd
• https://github.com/ezelnur6327/enesamaafkolan
• https://github.com/ezelnur6327/ezelnur6327