Back to directory
WRITEUP #457

CVE-2024-0685 Ninja Contact Forms Data Export SQLi

SQL InjectionSecurity code review
by@stealthcopter(Matthew Rollings)
Bounty
165
Program
Wordfence
Published
Feb 10, 2024
Added to HackDex
Aug 22, 2024
Read Full Writeuphttps://sec.stealthcopter.com/ninja-contact-forms/
▸ RELATED WRITEUPS
Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670
SQL InjectionReverse engineering
Exploiting authorization by nonce in WordPress plugins
RCEArbitrary file upload
Directory Traversal, SQL Injection and Server-Side Request Forgery
SQL InjectionPath traversal
Getting code execution on Veeam through CVE-2023-27532
RCEInsecure deserialization
Spip Preauth RCE 2024: Part 2, A Big Upload
RCEFile upload

Built with ❤️ by Shubham Rawat