CVE-2022-0739 PoC — BookingPress < 1.0.11 - Unauthenticated SQL Injection

Source

https://github.com/destr4ct/CVE-2022-0739

Associated Vulnerability

Title:BookingPress < 1.0.11 - Unauthenticated SQL Injection (CVE-2022-0739)
Description:The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

Description

Proof-of-Concept exploit (SQLI BookingPress  before 1.0.11)

Readme

# CVE-2022-0739
Proof-of-Concept exploit (SQLI BookingPress before 1.0.11)
<hr></hr>
<h6 align="center"><small>DISCLAIMER</small></h6>
<h6 align="center"><sub>Usage of this program without prior mutual consent can be considered as an illegal activity. It is the final user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
</sub></h6>

File Snapshot


 [4.0K]  /data/pocs/0f3e2ceb573ddef336fa46124e0fa369fc5450f3
├── [1.8K]  booking-press-expl.py
└── [ 460]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!