Description (CNA)
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| opensolution / Quick.CMS | affected 6.7 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/51910
- https://www.opensolution.org
- https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip
- https://www.vulncheck.com/advisories/quickcms-sql-injection-authentication-bypass-via-admin-login
ADP enrichment
No English description supplied.
No references supplied.