The vulnerability in the PageController.class.PHP of star7th ShowDoc allows an attacker to manipulate the "pages" argument in the API Page Sort Endpoint. This manipulation results in a SQL injection that could expose or alter data stored in the database, making the weakness a severe confidentiality breach. The flaw is identified as a classic SQL injection (CWE‑74, CWE‑89) and can be triggered from a remote location without local access.

Star7th ShowDoc versions up to 2.10.10, 3.6.2, and 3.8.0 are affected. The issue resides in the API Page Sort Endpoint component of the file server/application controller.

The CVSS score of 5.3 classifies the issue as medium severity, while an EPSS score of less than 1% indicates a low estimated exploitation probability. The vulnerability is not listed in the CISA KEV catalog. An attacker can launch the exploit remotely, but the description does not specify required authentication or privileges; therefore, the attack may rely on open API access or insufficient access controls. If successfully exploited, the attacker could gain unauthorized read or modify access to the database via injected SQL commands.