CVE-2021-47918: Simple CMS 2.1 SQL Injection Vulnerability via Users Module
Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers can exploit unvalidated input parameters in the admin.php file to compromise the database management system and web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47918?
CVE-2021-47918 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2021-47918?
To fix CVE-2021-47918, ensure to sanitize and validate all user inputs in the users module and apply the latest security patches from Simple CMS.
What impact can CVE-2021-47918 have on my system?
CVE-2021-47918 can allow attackers to execute arbitrary SQL commands, potentially compromising sensitive data and the overall integrity of your database.
Who is affected by CVE-2021-47918?
CVE-2021-47918 affects users of Simple CMS version 2.1, particularly those utilizing the users module in their applications.
When was CVE-2021-47918 disclosed?
CVE-2021-47918 was disclosed publicly in 2021, bringing attention to the vulnerability in Simple CMS.