WeiPHP SQL Injection Vulnerability

A SQL injection vulnerability exists in WeiPHP versions through 5.0, specifically within the SucaiController.class.php file and the cancelTemplate method. This vulnerability allows for remote exploitation by injecting malicious SQL payloads, potentially leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can interfere with the application's database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

The vulnerability can be reproduced by sending a crafted request to the public/index.php/admin/Sucai/cancelTemplate endpoint. The injection point is identified in the cancelTemplate method of the SucaiController.class.php file. After manual injection testing, the vulnerability can be confirmed using SQL injection tools such as SQLMap.