安全研究
CVE-2024-27956 WP Automatic SQL 注入:从 9.9 分插件漏洞到 admin 账户接管
Thinking
2024-07-15
3 分钟阅读
研究档案
#漏洞分析#代码审计#Web安全
WordPress valvePress/Automatic 插件未对 auth 参数做 %0a / null byte 过滤,攻击者绕过身份验证后通过 q 参数跑 SQL 注入,最终创建 eviladmin 管理员账户接管整站。
Unlock to view this content.
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