CVE-2023-53926
CriticalSummary
PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.
Risk Assessment
This vulnerability could lead to unauthorized access to data, modification, or deletion, posing a serious threat to data confidentiality and integrity.
Recommendation
It is recommended to immediately update the system to a patched version and to implement input validation and parameterized queries.
Original NVD description (English source)
PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.