Submit #645702: magicblack MacCMSv10 v2025.1000.4050 SQL Injectioninfo

Titelmagicblack MacCMSv10 v2025.1000.4050 SQL Injection
BeschreibungThe where parameter in the rep method(in application/admin/controller/Database.php) is not properly sanitized, allowing an administrator to execute arbitrary SQL queries.
Quelle⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb016.md
Benutzer
 Yu Bao (UID 88956)
Einreichung02.09.2025 10:25 (vor 10 Monaten)
Moderieren08.09.2025 17:17 (6 days later)
StatusAkzeptiert
VulDB Eintrag323092 [Maccms10 2025.1000.4050 Database.php rep where SQL Injection]
Punkte16

Do you know our Splunk app?

Download it now for free!