The vulnerability in Saurus CMS Community Edition arises from improper neutralization of special elements in an SQL command within admin/db_data.php at line 509. Authenticated administrators can inject arbitrary SQL via the table_name GET or POST parameter, which is not sanitized before being used in a SHOW COLUMNS FROM statement. Exploitation techniques include table traversal, time-based blind, boolean-based blind, and error-based SQL injection, allowing attackers to enumerate database schema details, access system tables such as information_schema, and chain with other injection points to extract sensitive credential data.

Successful exploitation allows an authenticated administrator to perform SQL injection attacks that can reveal the full database schema and access sensitive system tables. This can lead to disclosure of credential data and potentially other sensitive information stored in the database. The vulnerability compromises the confidentiality and integrity of the database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated administrator accounts and validate or sanitize input parameters, especially the table_name parameter, to prevent injection. Monitor for updates from the vendor regarding patches or official mitigations.