High · published December 8, 2025
⚠️ A sneaky SQL injection lurks in IdeaCMS up to version 1.8! By exploiting the `whereRaw` function in `Coupon.php`, an attacker can manipulate input parameters—talk about an open invitation! 🔓 Think of it like a restaurant that accepts orders without checking if the chef reads the entire menu. If someone shouts out an extra dish that wasn’t on the list, it could create chaos in the kitchen — or in this case, the database! An attacker could potentially pull sensitive information from your database, alter records, or even cause disruption. While it's not the end of the world, it's definitely an unwelcome dinner guest that could leave a bad taste. 🍽️
Think of it like a restaurant that accepts orders without checking if the chef reads the entire menu. If someone shouts out an extra dish that wasn’t on the list, it could create chaos in the kitchen — or in this case, the database! This vulnerability allows SQL injection via manipulated arguments in the `whereRaw` function, which can be called remotely without authentication. An attacker can execute arbitrary SQL commands on the database, compromising its integrity.
An attacker could potentially pull sensitive information from your database, alter records, or even cause disruption. While it's not the end of the world, it's definitely an unwelcome dinner guest that could leave a bad taste. 🍽️ Upgrade to IdeaCMS version 1.9 or later immediately to close this loophole. Additionally, validate and sanitize all inputs in your application to prevent SQL injection attacks in the future. You've got this! Implement these steps and you'll be back to serving a secure application in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| ideacms/ideacms | ≤ 1.8 | — |