pentester.land· Feb 10, 2024· by Matthew Rollings (@stealthcopter)💰 Bounty: 165🔍 CVE-2024-0685

CVE-2024-0685 Ninja Contact Forms Data Export SQLi

Open Original Article ↗
Target Program: Wordfence
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#SQL injection#Security code review#CVE-2024-0685

More Writeups Like This

pentester.land

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

by Sina Kheirkhah (@SinSinology)
pentester.land

Exploiting authorization by nonce in WordPress plugins

by Bartek Nowotarski
pentester.land

From a GLPI patch bypass to RCE

by Guilhem Rioux (@GuilhemRioux)
pentester.land

Hacking Apple - SQL Injection to Remote Code Execution

by Harsh Jaiswal (@rootxharsh), Rahul Maini (@iamnoooob)