Dokan Pro Unauthenticated SQL Injection POC | CVSS 10
by Loki - Monday July 8, 2024 at 02:16 PM
#41
(Jul 08, 2024, 02:16 PM)Loki Wrote:
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

POC:


Omnicer
ty my frind, love it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#42
(Jul 08, 2024, 02:16 PM)Loki Wrote:
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

POC:


http://breachqr3dqbysbq5khaadg5ynnpxn2wr...mnicer.png
Reply
#43
thanks for the exploit
Reply
#44
(Jul 08, 2024, 02:16 PM)Loki Wrote:
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

POC:


https://breachforums.rs//images/omnicer.png

thx
Reply
#45
Thanksss Bro
Reply
#46
Need this for education
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  POC CVE-2025-24071 caca28sapo1 17 1,284 Yesterday, 02:12 PM
Last Post: Test689
  New Zer0 Day Wordpress A3g00n 83 4,302 May 11, 2026, 08:17 PM
Last Post: j4ng0
  {SECRET} DATABASE OF EXPLOITS lulagain 441 28,259 May 11, 2026, 05:41 PM
Last Post: chiki
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 69 3,831 May 11, 2026, 03:55 PM
Last Post: fkmonkey
  CVE-2024-32002 RCE PoC HA_twck 2 598 May 11, 2026, 01:33 PM
Last Post: newxiao1

Forum Jump:


 Users browsing this forum: 1 Guest(s)