SQL Injection vulnerability in AdaptCMS

vendor:

AdaptCMS

by:

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: AdaptCMS

Affected Version From: 2.0.0

Affected Version To: 2.0.1

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

SQL Injection vulnerability in AdaptCMS

AdaptCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

It is recommended to sanitize user-supplied data before using it in SQL queries. Implementing parameterized queries or prepared statements can help prevent SQL injection attacks.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/50795/info

AdaptCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AdaptCMS 2.0.0 and 2.0.1 are vulnerable; other versions may also be affected. 

http://www.example.com/article/'66/Blog/AdaptCMS-20-March-26th
http://www.example.com/article/'75/News/AdaptCMS-200-Released
http://www.example.com/article/'293/Album/Pink-Floyd-Animals
http://www.example.com/article/'294/News/AdaptCMS-202-Update