CVE-2017-15984

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Creative Management System (CMS) Lite version 1.4 is vulnerable to SQL Injection via the S parameter in index.php.

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update CMS Lite to the latest version and implement input data filtering to prevent SQL Injection attacks.

Original NVD description (English source)

Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.