Executive brief
CMSsite is a content management system used to build and manage websites. A security flaw allows unauthenticated attackers to gain unauthorized access to the website's database. This could result in the theft of sensitive information, such as user credentials or private site content, and potentially allow attackers to disrupt site operations.
Technical details
An SQL injection vulnerability exists in CMSsite 1.0 due to improper neutralization of the 'post' parameter in post.php. The application directly concatenates the user-supplied GET parameter into a SQL query string without sanitization or prepared statements. An unauthenticated remote attacker can exploit this by sending crafted GET requests to perform boolean-based or time-based blind SQL injection. This allows for the extraction of sensitive data from the underlying database. A public exploit (PoC) is available on Exploit-DB.
Affected products
- VictorAlagwu CMSsite 1.0
Timeline
- 2019-02-17: disclosed: Vulnerability discovered by Mr Winst0n
- 2019-02-18: other: Exploit published on Exploit-DB
- 2022-03-06: other: GitHub repository archived by owner
- 2026-04-05: advisory: CVE-2019-25674 published