CVE-2022-0817

CRITICALNuclei

BadgeOS <= 3.7.0 - Unauthenticated SQLi

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-0817 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

BadgeOS

CVE List3.7.0 to ≤ 3.7.0affected

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress BadgeOS <=3.7.0 - SQL InjectionCVSS 9.8

WordPress BadgeOS plugin through 3.7.0 contains a SQL injection vulnerability. It does not sanitize and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized accessand data leakage.

Remediation

Update to the latest version of the BadgeOS plugin (>=3.7.1) to mitigate this vulnerability.

WeaknessesCWE-89
Authorstheamanrawat
Template tagscvecve2022wpunauthsqliwp-pluginbadgeoswpscanwordpressvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:badgeos:badgeos:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/69263610-f454-4f27-80af-be523d25659e https://wordpress.org/plugins/badgeos/ https://nvd.nist.gov/vuln/detail/CVE-2022-0817 https://github.com/20142995/sectool https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2