| 标题 | https://github.com/TeamEasy/EasyCMS EasyCMS v1.6 SQL injection vulnerability |
|---|
| 描述 | There exists a SQL injection vulnerability in the /RbacuserAction.class.php file of EasyCMS v1.6. This vulnerability is triggered when a user clicks Refresh on the backend user management page, because the system fails to effectively filter and validate the request parameter _order, allowing attackers to craft malicious request packets with injection markers to exploit the flaw.
Verified via sqlmap, this vulnerability is of the time-based blind injection type and is compatible with MySQL ≥ 5.0.12 databases. Once exploited, it enables attackers to bypass authentication, steal/tamper with/delete sensitive data in the database, and even execute system commands to take control of the server. This will lead to severe security incidents such as data leakage and server compromise, posing an enormous threat to system security and data confidentiality.
|
|---|
| 来源 | ⚠️ https://github.com/ueh1013/VULN/issues/20 |
|---|
| 用户 | 0xheeo (UID 85569) |
|---|
| 提交 | 2026-02-24 04時08分 (7 月前) |
|---|
| 管理 | 2026-03-08 08時03分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 349753 [EasyCMS 直到 1.6 Request Parameter RbacuserAction.class.php _order SQL注入] |
|---|
| 积分 | 20 |
|---|