CVE-2026-7435
HighSummary
SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attackers can craft encrypted payloads submitted to the /api/stl/actions/dynamic endpoint to execute arbitrary SQL statements.
Risk Assessment
This vulnerability can lead to unauthorized database access, data disclosure, authentication bypass, data modification, or complete database compromise.
Recommendation
It is recommended to update to the latest version of SSCMS and implement proper parameterization and sanitization mechanisms for SQL queries.
Other vulnerabilities in SSCMS v7.4.0
Original NVD description (English source)
SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attackers can craft encrypted payloads submitted to the /api/stl/actions/dynamic endpoint to execute arbitrary SQL statements, leading to unauthorized database access, data disclosure, authentication bypass, data modification, or complete database compromise.