An unauthenticated SQL injection vulnerability in Simple Content Management System 1.0 allows remote attackers to perform unauthorized database queries and extract sensitive information.

This vulnerability is a SQL injection (CWE-89) flaw located in the id parameter of the /web/index.php file. The application fails to properly sanitize user input, allowing an unauthenticated remote attacker to manipulate SQL queries and exfiltrate data from the underlying database.

The exploitation of this flaw poses a severe risk to data confidentiality and integrity. An attacker can leverage this injection to extract administrative credentials, user records, and the entire database content, leading to a full compromise of the application data. While the CVSS score is 7.3, the ability for an unauthenticated attacker to remotely dump the database makes this a high-priority risk for any organization hosting this software.

Immediate Action: As no official patch is currently available, administrators should restrict public access to the /web/index.php endpoint or disable the affected installation until a secure version is released.

Proactive Monitoring: Review web server access logs for anomalous GET requests containing SQL syntax, such as UNION, SELECT, or database-specific keywords, directed at the index.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the id parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub repository referenced in the vulnerability details.

Given the availability of a functional proof-of-concept and the lack of a vendor-provided patch, this vulnerability presents a credible and immediate threat to the confidentiality of your data. Organizations should prioritize isolating the affected system from the public internet and implementing strict input validation via a WAF to mitigate the risk of unauthorized database access.