CVE-2016-9333
CriticalSummary
An issue was discovered in Moxa SoftCMS versions prior to 1.6 related to improper input sanitization. A remote attacker may gain access to SoftCMS with administrator privileges through specially crafted input (SQL INJECTION).
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data loss or takeover of the application.
Recommendation
It is recommended to update Moxa SoftCMS to version 1.6 or later to mitigate this vulnerability and implement additional security measures against SQL Injection attacks.
Original NVD description (English source)
An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may allow a remote attacker access to SoftCMS with administrator's privilege through specially crafted input (SQL INJECTION).