Description
WordPress Perfect Survey存在SQL注入漏洞，此漏洞是缺乏校验导致的。
WordPress Perfect Survey CVE-2021-24762 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-24762
https://www.sentinelone.com/vulnerability-database/cve-2021-24762/
https://www.exploit-db.com/exploits/50766
https://wpscan.com/vulnerability/c1620905-7c31-4e62-80f5-1d9635be11ad/
https://www.rapid7.com/db/vulnerabilities/perfect-survey-plugin-cve-2021-24762/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/perfect-survey
https://attackerkb.com/topics/lNw71U1GfX/cve-2021-24762
https://patchstack.com/database/wordpress/plugin/perfect-survey/vulnerability/wordpress-perfect-survey-plugin-1-5-0-unauthenticated-sql-injection-sqli-vulnerability
https://medium.com/@althubianymalek/uploading-a-shell-in-wordpress-via-sqli-entry-point-1caf441b3d9a
https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24762/README.md
https://www.northit.co.uk/cve/2021/24762
https://www.linkedin.com/posts/aaryan-golatkar_i-always-wondered-how-metasploit-modules-activity-7270786722823557121-g74Y
https://hackhalt.com/threat/cve-2021-24762/
https://sploitus.com/exploit?id=69C28679-6D45-504D-AD8D-46A7E9F13027