Smart Google Code Inserter < 3.5 - Unauthenticated SQL Injection via oId Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2018-3811. PoCs published by Benjamin Lim, cved-sources.
AI-analyzed exploit summary The exploit demonstrates an authentication bypass and SQL injection vulnerability in Smart Google Code Inserter WordPress plugin version 3.4. It includes curl commands to exploit unauthenticated code insertion and SQLi via unsanitized POST parameters.
Description
SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements and did not sanitize the $_POST["oId"] variable before passing it as input into the SQL query.
Exploits (2)
The exploit demonstrates an authentication bypass and SQL injection vulnerability in Smart Google Code Inserter WordPress plugin version 3.4. It includes curl commands to exploit unauthenticated code insertion and SQLi via unsanitized POST parameters.
This repository provides a Docker container setup for CVE-2018-3811, a vulnerability in the Smart Google Code Inserter WordPress plugin. The script initializes a WordPress environment with MySQL and activates the vulnerable plugin, making it ready for exploitation testing.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H