[Loki]

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

POC:

Hidden Content

You must register or login to view this content.

[Xlucky]

Thank you, I will try it

[KingJulien]

Learning SQL for ethical purpose

[SamBent]

inurl:/wp-content/plugins/dokan-pro

intitle:"Dokan Pro" inurl:/wp-content/plugins

[Loki]

inurl:/wp-content/plugins/dokan-pro

intitle:"Dokan Pro" inurl:/wp-content/plugins

good ol' google dorks!

OR

we can use censys search with something like

"dokan pro" and labels= `wordpress`

and fetch all the servers that are using that plugin.

then sort by the last modified date to weed out the patched servers.

[SamBent]

@Lokie Yes, thank you for passively pointing out that I'm old hahahahahhahaha
This and Shodan as well; I'm just old school.

[Loki]

@DoingFedTime tbh when everything fails, google dorks win

[breacher222]

Need this for education

[moha200]

thank you sql injection best attack thx

[Yazidcisar47]

I will try it now