Description
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| opensolution | Quick.CMS | 6.7 | — |
References
- ExploitDB-51910 exploit
- Official Product Homepage product
- Software Link product
- VulnCheck Advisory: Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login third-party-advisory