CVE-2024-9796
CRITICAL NUCLEIWP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection via t Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2024-9796. PoCs published by yup-Ivan, RandomRobbieBF, BwithE. A Nuclei detection template is also available.
AI-analyzed exploit summary This is a functional PoC for CVE-2024-9796, demonstrating SQL injection in the WP Advanced Search plugin for WordPress via unsanitized GET parameters. The exploit targets the autocompletion endpoint to extract user credentials or database information.
Description
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Exploits (4)
This is a functional PoC for CVE-2024-9796, demonstrating SQL injection in the WP Advanced Search plugin for WordPress via unsanitized GET parameters. The exploit targets the autocompletion endpoint to extract user credentials or database information.
This repository provides a proof-of-concept for an unauthenticated SQL injection vulnerability in the WordPress WP-Advanced-Search plugin (versions up to 3.3.9). The exploit leverages a time-based blind SQL injection via the 'f' parameter in an autocompletion endpoint.
This PoC demonstrates an unauthenticated SQL injection vulnerability in WP-Advanced-Search < 3.3.9.2, allowing an attacker to dump WordPress user credentials and password hashes. The exploit constructs a malicious SQL query via URL parameters to extract data from the wp_users table.
The repository appears to be a stub or placeholder for CVE-2024-9796, containing standard WordPress files without any exploit code or clear vulnerability demonstration. The README incorrectly references CVE-2024-9797, suggesting a possible typo or mislabeling.
Nuclei Templates (1)
body="/wp-content/plugins/wp-advanced-search/"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H