Melis Technology melis-cms
Moderate fix1 remedy
cpe:2.3:a:melistechnology:meliscms:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 5.3.4
Melis Technology Melis Platform SQL Injection Vulnerability in CMS Module
Vulnerability
Patched
A SQL injection vulnerability has been identified in the Melis CMS module of Melis Technology's Melis Platform, affecting versions prior to 5.3.4. This vulnerability allows attackers to retrieve, create, update, and delete databases by exploiting the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint.
Impact
Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.
Remediation
Users can upgrade to Melis CMS version 5.3.4 to address this vulnerability.
Added: Oct 8, 2025, 11:19 AM
Updated: Oct 8, 2025, 11:19 AM
Vulnerability Rating
Custom Algorithm
spread
1.0impact
5.0exploitability
7.6remediation
7.7relevance
0.7threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.