.. / CVE-2024-3552

• SQLi
• PoC
• Nuclei
• Web

Exploit for WordPress Plugin Web Directory Free < 1.7.0 - Unauthenticated SQL Injection (CVE-2024-3552)

Description:

The Web Directory Free plugin for WordPress does not sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users. This leads to a SQL injection vulnerability using different techniques like UNION, Time-Based, and Error-Based.

Affected Products:

• Web Directory Free < 1.7.0 (fixed in 1.7.0)

Nuclei Template

View the template here CVE-2024-3552.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-3552.yaml

References: