Threats tagged 'ghsa-vhhj-g588-8p4h'

SSCMS version 7.4.0 has a SQL injection vulnerability in the stl:sqlContent tag. The queryString attribute is used directly in database queries without proper parameterization or sanitization. This allows attackers to send crafted encrypted payloads to the /api/stl/actions/dynamic endpoint to execute arbitrary SQL commands. The vulnerability can lead to unauthorized database access, data disclosure, authentication bypass, data modification, or full database compromise.