Executive brief
A vulnerability exists in the Simple Content Management System, a tool used for managing website content. An attacker can exploit a flaw in the administrator login page to bypass security checks without needing a valid username or password. This allows an unauthorized person to gain full administrative control over the website, enabling them to modify, delete, or add malicious content.
Technical details
A SQL injection vulnerability exists in code-projects Simple Content Management System 1.0 within the '/web/admin/login.php' component. The 'User' (or 'user') parameter does not properly sanitize input before incorporating it into a database query. A remote, unauthenticated attacker can exploit this by submitting a specially crafted SQL payload (e.g., 'test\' or 1=1 -- -') to bypass the authentication logic. Successful exploitation grants the attacker full administrative access to the CMS backend. A public exploit (Proof of Concept) is available.
Affected products
- code-projects Simple Content Management System 1.0
Timeline
- 2026-04-13: advisory: Initial disclosure and CVE assignment