Dockerizing a Vulnerability: CVE-2023-23488

This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely.

Vulnerable Application

Paid Memberships Pro v2.9.8 (WordPress Plugin) - Unauthenticated SQL Injection

Installation

To run this project, you need to have on your machine:

• Docker
• Python
• SQLMAP

Once the prerequisites are installed, you can clone this Git repository on your machine:

  git clone https://github.com/cybfar/CVE-2023-23488-pmpro-2.8.git

  cd CVE-2023-23488-pmpro-2.8

Once in the directory, run the command below to set up the vulnerable environment:

  docker compose up

Then access the application at http://localhost

Vulnerability Verification

Running the script below on a WordPress instance with the Paid Membership Pro plugin indicates whether the target is vulnerable. The script will generate the appropriate sqlmap command to exploit the vulnerability

  python CVE-2023-23488.py http://localhost