CNNVD-202512-2048 Information
CNNVD ID
CNNVD-202512-2048
Related CVE
- CNNVD Published: 2025-12-11
Description (Chinese)
Opensolution Quick.Cms是波兰Opensolution公司的一款用于构建文本管理平台的建站系统。 Opensolution Quick.Cms 6.7版本存在SQL注入漏洞,该漏洞源于登录表单存在SQL注入,可能导致未经授权的管理员访问。
Description (English)
Opensolution Quick.Cms is a building system for the construction of a text management platform by the Polish company Opensolution. Version 6.7 of Opensolution Quick.Cms contains an injection loophole in SQL, which stems from the presence of SQL in the login form and may lead to unauthorized access by administrators.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
OpenSolution
Published
2025-12-11
Last Modified
2026-02-24
References
https://www.vulncheck.com/advisories/quickcms-sql-injection-authentication-bypass-via-admin-login https://www.exploit-db.com/exploits/51910 https://www.opensolution.org https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip https://access.redhat.com/security/cve/cve-2024-58308
Share on: