.. / CVE-2022-0773

• SQLi
• Nuclei
• Web

Exploit for Documentor <= 1.5.3 - Unauthenticated SQL Injection (CVE-2022-0773)

Description:

The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.

Nuclei Template

View the template here CVE-2022-0773.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0773.yaml

References: