CVE-2024-5522-Poc

CVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection

Setup env:

1. Install HTML5 Video Player version 2.5.24 because version have html5-video-player.2.5.24\inc\Database\Videos.php create table h5vp_videos and version >=2.5.25 database folder not found

2. Active HTML5 Video Player version 2.5.24 after check database

3. If you test HTML5 Video Player version 2.5.26 . Use command remove folder plugin HTML5 Video Player version 2.5.24 after remove plugin check ensure table wp_h5vp_videos exists on database (note: not uninstall plugin on dashboards website)

4. Install HTML5 Video Player version 2.5.26 and active

Analysis

File: wp-content/plugins/html5-video-player/inc/Rest/VideoController.php

Method: another_check default return true =>

Method: get_item

Poc:

Poc.mp4