CyberRota Analysis
AI-GeneratedThe front-end interface of MCMS versions up to 6.2.0 is susceptible to SQL injection due to the unparameterized inclusion of the size parameter in SQL queries. This vulnerability allows attackers to execute arbitrary SQL commands, including stacked statements, without authentication, potentially leading to data manipulation or exfiltration. Organizations using this CMS should prioritize remediation to mitigate the risk of unauthorized database access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause of SQL through FreeMarker ${size} without being parameterized and bound. The built-in SqlInjectionUtil employs regular expression blacklist filtering, yet keywords like CREATE/TABLE/SET/PREPARE/EXECUTE are not included in the list, allowing for bypassing. Attackers can execute stacked SQL statements without logging in.