CVE-2021-24862
HIGH NUCLEIWordpress RegistrationMagic task_ids Authenticated SQLi
Title source: metasploitExploitation Summary
EIP tracks 2 public exploits for CVE-2021-24862.
PoCs published by Ron Jost, h00die, Hacker5preme (Ron Jost), including Metasploit module auxiliary/scanner/http/wp_registrationmagic_sqli.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862). It authenticates to WordPress, creates a task, and then uses sqlmap to exploit the SQL injection via the `rm_chronos_ajax` AJAX action.
Description
The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue
Exploits (2)
This exploit demonstrates an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862). It authenticates to WordPress, creates a task, and then uses sqlmap to exploit the SQL injection via the `rm_chronos_ajax` AJAX action.
This Metasploit module exploits an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862) via the `task_ids` parameter. It performs time-based blind SQLi to dump user credentials from the `wp_users` table.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H