sauruscms/Saurus-CMS-Community-Edition

sauruscms/Saurus-CMS-Community-Edition

GitHubGitHub
GitHubgithub.com
www.saurus.infowww.saurus.info
Releases0
Stars26
Saurus CMS Community Edition
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-52390↗
9.1 CRITICAL—

Saurus CMS Community Edition since commit d886e5b0 (2010-04-23) is vulnerable to a SQL Injection vulnerability in the `prepareSearchQuery()` method in `FulltextSearch.class.php`. The application directly concatenates user-supplied input (`$search_word`) into SQL queries without sanitization, allowing attackers to manipulate the SQL logic and potentially extract sensitive information or escalate their privileges.