Read the docs
TI-2026-51754 Aliases CVE-2026-73670GHSA-mgf4-rmqm-69fq

CMS Admin SQL Injection via db_data.php table_name Parameter

Priority MEDIUM 40CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the table_name GET or POST parameter. Attackers can perform table traversal, time-based blind, boolean-based blind, and error-based injection techniques to enumerate full database schema, access system tables such as information_schema, and chain the disclosure with secondary injection points to extract credential data.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0053 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SaurusSaurus CMS Community Editionup to d886e5b—No fix listedCNA
  • Saurus CMS Community Edition VendorSaurus Affected up to d886e5b Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-73670
  2. 2026-10-03 Alias added: GHSA-mgf4-rmqm-69fq

References

Other 2

  • TI-2026-51755 Saurus CMS Unauthenticated Open Redirect via logout url parameter CVSS 4.0MEDIUM 5.1
  • TI-2015-01396 Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote… CVSS 2.0MEDIUM 4.3
  • TI-2015-00815 Multiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox… CVSS 2.0MEDIUM 4.3
  • TI-2010-01913 Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences