Volerion logoVolerion
Volerion logoVolerion

appRain CMF SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability exists in appRain CMF version 4.0.5. This vulnerability allows attackers to retrieve, create, update, and delete database records. The issue arises in the '/apprain/admin/manage/add/' endpoint, specifically through the 'data[Admin][username]' parameter.

Impact

Exploitation of this vulnerability allows for complete control over the application's database, enabling attackers to manipulate data at will.

Added: Sep 4, 2025, 11:43 AM
Updated: Sep 4, 2025, 6:00 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
3.3
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.