CVE-2023–6063: Manual Blind SQL Exploitation

Greetings:

I don't publish every lab I write here because I don't want to spam the community, but I think this one might be of interest. The recent wp-fastest-cache (WordPress Plugin) CVE relates to a blind SQL condition. Most of the PoC information found via Google demonstrates which cookie is vulnerable to a sleep condition injection and then provides an SQLMap one-liner. The lab I have below walks through how this type of data exfiltration is possible through the process …

cache community cookie cve cybersecurity don exploitation found google information interest lab plugin poc sleep spam sql vulnerable wordpress wordpress plugin