CyberRota Analysis
AI-GeneratedAuthenticated administrators using baserCMS versions prior to 5.3.0 are vulnerable to a SQL injection flaw in BcDatabaseService.php, which allows attackers to manipulate SQL statements through injected table names and configuration values. This vulnerability can be exploited in conjunction with a backup restore code injection issue, enabling attackers to extract sensitive information from the PostgreSQL database. Organizations utilizing baserCMS should prioritize patching to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequence update, CSV export, and table management operations. Attackers can chain a backup restore code injection flaw, where PHP code outside class definitions in schema files executes unconditionally upon loading, to plant malicious table names and trigger error-based SQL injection that retrieves database version, schema contents, and arbitrary data from the PostgreSQL backend.