Description
A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-04
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote SQL Injection
Action: Patch Immediately
AI Analysis

Impact

The vulnerability resides in the ChapterModel::searchChapter function located in App/Home/Controller/ChapterController.class.php of the light0011 CMS. By manipulating the content argument sent to this function, an attacker can inject arbitrary SQL statements into the query that is executed against the database. The flaw is a classic SQL injection, a type of input manipulation identified as CWE-89 and CWE-74. The attack vector is web‑based and may be launched remotely, and a public exploit has already been released, making the issue potentially exploitable in any reachable instance of the CMS.

Affected Systems

The light0011 CMS product does not use version identifiers, so all installations of this CMS that contain the current codebase are affected. The flaw exists in the Query Builder component, and because no specific releases are documented, every deployed instance that includes the ChapterController class is vulnerable unless a future patch removes the vulnerability.

Risk and Exploitability

The base CVSS score of 6.9 indicates a medium‑to‑high risk for remote exploitation. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. However, the publicly available exploit and the ability to execute arbitrary SQL remotely through the web interface increase the likelihood of real‑world exploitation. Systems running the CMS should consider this issue to be of high urgency for mitigation.

Generated by OpenCVE AI on September 4, 2026 at 01:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest official release of light0011 CMS once a corrective update is released by the vendor.
  • If an update is not yet available, modify the ChapterModel::searchChapter code to use parameterized queries or safe input handling to prevent injection of arbitrary SQL.
  • Deploy a Web Application Firewall or intrusion prevention system configured to detect and block typical SQL injection payloads targeting the content parameter.
  • Restrict access to the CMS administration interface to trusted IP addresses or through VPN to reduce exposure.

Generated by OpenCVE AI on September 4, 2026 at 01:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 04 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulation of the argument content results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Title light0011 cms Query Builder ChapterController.class.php searchChapter sql injection
First Time appeared Light0011
Light0011 cms
Weaknesses CWE-74
CWE-89
CPEs cpe:2.3:a:light0011:cms:*:*:*:*:*:*:*:*
Vendors & Products Light0011
Light0011 cms
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Light0011 Cms
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-04T14:26:52.469Z

Reserved: 2026-09-03T17:53:45.813Z

Link: CVE-2026-85379

cve-icon Vulnrichment

Updated: 2026-09-04T14:26:49.062Z

cve-icon NVD

Status : Deferred

Published: 2026-09-04T01:17:22.537

Modified: 2026-09-04T15:17:37.200

Link: CVE-2026-85379

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T02:00:05Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')