CVEs-PoC/2021/CVE-2021-24786.md

### [CVE-2021-24786](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24786)
![](https://img.shields.io/static/v1?label=Product&message=Download%20Monitor&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=4.4.5%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89%20SQL%20Injection&color=brightgreen)

### Description

The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

### POC

#### Reference
- https://wpscan.com/vulnerability/a6571f16-66d2-449e-af83-1c6ddd56edfa

#### Github
- https://github.com/20142995/nuclei-templates
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Enes4xd/Enes4xd
- https://github.com/Hacker5preme/Exploits
- https://github.com/cr0ss2018/cr0ss2018
- https://github.com/ezelnur6327/Enes4xd
- https://github.com/ezelnur6327/enesamaafkolan
- https://github.com/ezelnur6327/ezelnur6327