A critical SQL injection vulnerability in XATABoost CMS 1.0.0 allows unauthenticated attackers to compromise sensitive database contents.

The application fails to properly sanitize user-supplied input in the id parameter of the news.php endpoint. This allows an unauthenticated attacker to inject malicious SQL commands and perform union-based data extraction from the backend database.

The vulnerability poses a severe risk to data confidentiality, as it enables unauthorized access to the underlying database. Successful exploitation could lead to the exposure of sensitive user information, administrative credentials, or proprietary content. Given the CVSS score of 8.2, this flaw is considered high severity and requires immediate attention to prevent potential data breaches.

Immediate Action: Since no official patch is available for this legacy version, administrators should restrict access to the news.php endpoint or disable the affected module entirely.

Proactive Monitoring: Review web server access logs for anomalous GET requests to news.php containing SQL syntax or unusual characters in the id parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, specifically targeting union-based attack vectors.

Public Exploit Available: Yes, a published proof-of-concept exploit exists and is documented on ExploitDB (EDB-ID 44622).

The presence of a public exploit significantly increases the risk of successful exploitation by opportunistic threat actors. Organizations still utilizing XATABoost CMS 1.0.0 are strongly urged to migrate to a modern, supported content management system, as this software is likely end-of-life and lacks ongoing security maintenance. Until migration is complete, apply the identified compensating controls to minimize the attack surface.