CVE-2022-28032

AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php

published April 12, 2022

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

⚠️ Watch out, AtomCMS users! An SQL injection vulnerability lurking in Atom.CMS_admin_ajax_pages.php could have sneaky implications for your site. 🔍 Think of this like a restaurant kitchen where a waiter incorrectly records an order; if a chef doesn’t double-check, they might cook up something entirely wrong—like serving dessert as the main course! If exploited, an attacker could manipulate your database queries, potentially gaining access to sensitive data, altering it, or even deleting critical information. It's like handing over the keys to the kitchen and letting someone else decide the menu!

Put simply

Think of this like a restaurant kitchen where a waiter incorrectly records an order; if a chef doesn’t double-check, they might cook up something entirely wrong—like serving dessert as the main course! This vulnerability allows attackers to inject SQL commands through unsanitized inputs in Atom.CMS_admin_ajax_pages.php, making it possible to execute arbitrary database queries.

What to do

If exploited, an attacker could manipulate your database queries, potentially gaining access to sensitive data, altering it, or even deleting critical information. It's like handing over the keys to the kitchen and letting someone else decide the menu! To protect your site, update AtomCMS to the latest version that addresses this vulnerability as soon as possible. Additionally, ensure that all user inputs are properly sanitized to prevent SQL injection. Conduct a security audit to identify any other potential vulnerabilities. You've got this! Address this issue, and you'll be one step closer to being a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05922 · 93.2th percentile
Published
2022-04-12T15:14Z
EPSS history
Timeline
  • 12 APR 15:14Z
    AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
    cvelistv5