Volerion logoVolerion
Volerion logoVolerion

appRain CMF SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability exists in appRain CMF version 4.0.5. This vulnerability allows attackers to retrieve, create, update, and delete database entries. The issue arises in the '/apprain/page/manage-dynamic-pages/create' endpoint, specifically through the 'data[Page][name]' parameter.

Impact

Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.

Added: Sep 4, 2025, 11:43 AM
Updated: Sep 4, 2025, 5:00 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
3.3
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.