Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-73670— CMS Admin SQL Injection via db_data.php table_name Parameter

Quick assessment

Affected
Saurus Saurus CMS Community Edition
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

内容管理系统（CMS）中存在一个 SQL 注入漏洞，位于 admin/db_data.php 文件的第 509 行。该漏洞允许经过身份验证的管理员通过提供未经验证和清洗的 table_name GET 或 POST 参数，在 SHOW COLUMNS FROM 语句中注入任意 SQL 代码。攻击者可利用表遍历、基于时间的盲注、基于布尔值的盲注以及基于错误的注入等技术，枚举完整的数据库结构，访问如 information_schema 等系统表，并结合其他次要注入点串联攻击，以窃取凭据数据。

CVSS 7.2 · High EPSS 0.53% · P44

Affected Version Matrix 1

VendorProduct Version RangeStatus
Saurus Saurus CMS Community Edition ≤ d886e5b affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-73670

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CMS Admin SQL Injection via db_data.php table_name Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the table_name GET or POST parameter. Attackers can perform table traversal, time-based blind, boolean-based blind, and error-based injection techniques to enumerate full database schema, access system tables such as information_schema, and chain the disclosure with secondary injection points to extract credential data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Saurus Saurus CMS Community Edition 0 ~ d886e5b -

II. Public POCs for CVE-2026-73670

# POC Description Source Link Shenlong Link
AI-Generated POC Verified env Premium
Reproduced successfully in a real sandbox · Below is the actual recording of building the environment and exploiting the vulnerability.
Reproduction recording is a Pro+ exclusive
Watch the full sandbox build + live exploit recording for this CVE. Limited-time ¥499/mo.
Upgrade to Pro+
claude_code · 6447 chars
GitHub 复现环境（可 clone 直接跑）
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-73670

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-73670 (1)

Proof of Concept for CVE-2026-73670 (1)

Security Blog Posts for CVE-2026-73670 (1)

Other References for CVE-2026-73670 (1)

IV. Related Vulnerabilities

Same product: Saurus CMS Community Edition
Same vendor: Saurus
Same weakness: CWE-89

V. Comments for CVE-2026-73670

No comments yet

Leave a comment