CVE-2017-15984

CMS Lite 1.4 is affected by a SQL injection in index.php via the S parameter. The vulnerability arises from injectable SQL commands in the S query string, enabling an attacker to execute arbitrary SQL. Public PoCs and exploits exist (e.g., Exploit-DB, packetstorm) demonstrating the issue. The CVS...