FTCMS SQL Injection Vulnerability in Search Component

A critical SQL injection vulnerability has been identified in FTcms version 2.1. The issue arises in the Search component, specifically within an unknown function of the file '/admin/index.php/web/ajax_all_lists'. The vulnerability is triggered by manipulating the 'name' argument, allowing for remote exploitation. This SQL injection could potentially impact the application's database interactions, leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.