| शीर्षक | light0011 cms f72cf46f601efb2a0618c3814cc2f61380b38930 SQL Injection |
|---|
| विवरण | `App/Home/Controller/ChapterController.class.php:37-43` passes the unauthenticated `POST` parameter `content` to `Home\Model\ChapterModel::searchChapter()`. At `App/Home/Model/ChapterModel.class.php:180` and `:188`, the value is interpolated into raw `where()` SQL strings for `a.name` and `a.keyword`; `searchTagChapter()` repeats the flaw with `GET tag` at line 212. The query builder accepts raw strings without parameterization, allowing an attacker to alter query predicates and potentially read, modify, or infer database data available to the application database user. |
|---|
| स्रोत | ⚠️ https://github.com/light0011/cms/issues/7 |
|---|
| उपयोगकर्ता | creeper (UID 99925) |
|---|
| सबमिशन | 18/07/2026 05:52 AM (2 महीनों पहले) |
|---|
| संयम | 03/09/2026 07:54 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 398533 [light0011 cms Query Builder ChapterController.class.php searchChapter content SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|