Description
TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information by crafting malicious query payloads.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| thejshen | contentManagementSystem | 1.04 | — |
References
- ExploitDB-47569 exploit
- Vendor Homepage product
- VulnCheck Advisory: TheJshen contentManagementSystem 1.04 - 'id' SQL Injection third-party-advisory