Pro3W CMS SQL Injection Vulnerability Allowing Authentication Bypass and Administrative Access

A SQL injection vulnerability has been identified in Pro3W CMS version 1.2.0, allowing unauthenticated attackers to bypass authentication and gain administrative privileges. This issue arises from improper input sanitization in the login form, which enables exploitation of the application's database query handling.

Impact

Exploitation of this vulnerability allows for authentication bypass, granting unauthorized users administrative privileges on the affected Pro3W CMS installation.

Remediation

Users should upgrade to Pro3W CMS versions released in January 2026 or later to address this vulnerability.