Saurus Cms Community Edition
Monthly
SQL injection in Saurus CMS Community Edition's admin panel grants authenticated administrators the ability to fully enumerate and extract data from the underlying database. The flaw resides in admin/db_data.php at line 509, where the table_name GET or POST parameter is passed unsanitized into a SHOW COLUMNS FROM SQL statement, enabling time-based blind, boolean-based blind, and error-based injection techniques that expose the full schema and can be chained to extract credential data. A publicly available proof-of-concept exploit has been published by VulnCheck; no patch has been identified at time of analysis.
SQL injection in Saurus CMS Community Edition's admin panel grants authenticated administrators the ability to fully enumerate and extract data from the underlying database. The flaw resides in admin/db_data.php at line 509, where the table_name GET or POST parameter is passed unsanitized into a SHOW COLUMNS FROM SQL statement, enabling time-based blind, boolean-based blind, and error-based injection techniques that expose the full schema and can be chained to extract credential data. A publicly available proof-of-concept exploit has been published by VulnCheck; no patch has been identified at time of analysis.