| 제목 | wtcms cms 1.0 SQL Injection |
|---|
| 설명 | ● Two critical SQL Injection vulnerabilities have been identified in the check() function within the CommentadminController class of the affected application. The vulnerabilities arise due to improper neutralization of special elements used in SQL commands (ids parameter). The code directly concatenates user-supplied input from the $_POST['ids'] array into SQL queries without using parameterized queries or proper sanitization, allowing an attacker to execute arbitrary SQL commands on the underlying database
● Both vulnerabilities are located in the approval (check) and unapproval (uncheck) function branches. |
|---|
| 원천 | ⚠️ https://www.yuque.com/shangu-vvuup/ydpg69/dd5zpygt7w5w4d19?singleDoc# 《SQL Injection Vulnerability in WTCMS 1.0(Multiple Locations)》 |
|---|
| 사용자 | sT1TcH (UID 91291) |
|---|
| 제출 | 2025. 11. 04. PM 02:24 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 29. PM 01:55 (25 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 333787 [taosir WTCMS 까지 01a5f68a3dfc2fdddb44eed967bb2d4f60487665 CommentadminController CommentadminController.class.php check/uncheck/delete ids SQL 주입] |
|---|
| 포인트들 | 20 |
|---|