An unauthenticated SQL injection vulnerability in Elaniin CMS version 1.0 allows attackers to bypass authentication controls and gain unauthorized administrative access.

The application is susceptible to an SQL injection attack within the login.php file. By submitting crafted input to the email and password parameters, an unauthenticated attacker can manipulate database queries to bypass the login process.

The ability for an unauthenticated attacker to bypass authentication poses a critical risk to the confidentiality and integrity of the system. Successful exploitation allows unauthorized users to access the administrative dashboard, potentially leading to full system compromise, data exfiltration, or further malicious activity. With a CVSS score of 8.2, this vulnerability represents a high-severity threat that requires immediate attention to prevent unauthorized access to sensitive business operations.

Immediate Action: As there is no official patch available, administrators should immediately restrict access to the login page using network-level controls or consider migrating to a more secure and supported content management system.

Proactive Monitoring: Review web server access logs for anomalous POST requests to login.php, specifically searching for strings containing single quotes, OR operators, or SQL-related syntax.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, which can effectively mitigate the risk of this vulnerability being exploited.

Public Exploit Available: Yes, a functional exploit is available via the Exploit-DB entry 48705.

Given the presence of a public exploit and the lack of a vendor-provided patch, this vulnerability presents a significant security risk. Organizations currently utilizing Elaniin CMS 1.0 must prioritize isolating the affected application from public-facing networks or replacing the software entirely to eliminate the exposure. Immediate implementation of WAF rules is strongly advised as a temporary containment measure.