cve/2022/CVE-2022-0739.md

CVE-2022-0739

Description

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

POC

Reference

• https://wpscan.com/vulnerability/388cd42d-b61a-42a4-8604-99b812db2357

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/BKreisel/CVE-2022-0739
• https://github.com/Chris01s/CVE-2022-0739
• https://github.com/ElGanz0/CVE-2022-0739
• https://github.com/G01d3nW01f/CVE-2022-0739
• https://github.com/Ki11i0n4ir3/CVE-2022-0739
• https://github.com/cyllective/CVEs
• https://github.com/destr4ct/CVE-2022-0739
• https://github.com/hadrian3689/wp_bookingpress_1.0.11
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/lhamouche/Bash-exploit-for-CVE-2022-0739
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/viardant/CVE-2022-0739
• https://github.com/whoforget/CVE-POC
• https://github.com/x00tex/hackTheBox
• https://github.com/youwizard/CVE-POC