An unauthenticated SQL injection vulnerability in SimplePress CMS 1.0.7 poses a critical risk by allowing attackers to extract sensitive database information.

This is an SQL injection (CWE-89) vulnerability found in the application's handling of the p and s parameters. Unauthenticated attackers can inject malicious SQL payloads through these GET parameters to interact directly with the backend database.

The ability to perform unauthorized SQL queries against the application database creates a high risk of sensitive data exposure, including user credentials, administrative configurations, and database schema details. With a CVSS score of 8.2, this vulnerability represents a significant security failure that could lead to full database compromise and subsequent unauthorized access to the broader application environment.

Immediate Action: As no official patch is currently identified for this legacy version, administrators must restrict access to the affected endpoints or move to a secure alternative CMS platform.

Proactive Monitoring: Security teams should review web server access logs for anomalous GET requests containing SQL syntax, such as UNION or SELECT statements, targeting the p or s parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules to block malicious payloads targeting these specific parameters before they reach the application.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the technical write-up on Exploit-DB (EDB-ID 46235).

Given the availability of a public exploit and the ease of execution, organizations still running SimplePress CMS 1.0.7 are at high risk. Immediate action is required to either mitigate the flaw through WAF rules or migrate to a supported, secure content management system to eliminate this exposure entirely.