CVE-2026-53690
CriticalCVSS 9.3Summary
An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, allowing unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.
Risk Assessment
An attacker can gain unauthorized access to the database, steal credentials, personal data, or other confidential information, potentially leading to data breaches and reputational damage.
Recommendation
Immediately update Redeight CMS to the latest patched version and implement prepared statements for all SQL queries.
Other vulnerabilities in Redeight CMS
See all- CVE-2026-53692Medium
Redeight CMS version 1.0 stores user passwords using the MD5 algorithm without a salt. MD5 is a cryptographically broken algorithm and the lack of salting allows attackers to easily reverse the hashes using rainbow tables.
- CVE-2026-53691High
An unrestricted file upload vulnerability in Redeight CMS 1.0 allows authenticated attackers to achieve remote code execution (RCE) via the POST /admin/index.php?module=pages&mode=FileAdd endpoint. The application fails to validate file extensions and MIME types, permitting arbitrary PHP scripts to be uploaded to the /uploads/files/ directory where they are executed by the web server.
Original NVD description (English source)
An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS