.. / CVE-2022-0814

• SQLi
• Nuclei
• Web

Exploit for Ubigeo de Peru < 3.6.4 - SQL Injection (CVE-2022-0814)

Description:

The plugin does not properly sanitise and escape some parameters before using them in SQL statements via various AJAX actions, some of which are available to unauthenticated users, leading to SQL Injections.

Nuclei Template

View the template here CVE-2022-0814.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0814.yaml

References: