LyLme Spage SQL Injection Vulnerability in ajax_link.php

A critical SQL injection vulnerability has been identified in LyLme Spage version 2.1. The issue resides in the file ajax_link.php, specifically within the sort argument. This vulnerability can be exploited remotely, allowing attackers to manipulate the sort parameter and execute arbitrary SQL commands.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.