PAD CMS Blind SQL Injection Vulnerability

A Blind SQL Injection vulnerability has been identified in PAD CMS article positioning functionality. This issue arises from improper neutralization of input provided by an authorized user, allowing for SQL injection attacks that are not visible to the attacker. The vulnerability affects all three templates: www, bip, and ww+bip. PAD CMS is no longer supported, and the producer will not release patches for this vulnerability.

Impact

Exploitation of this vulnerability allows for Blind SQL Injection attacks, where an attacker can manipulate SQL queries and potentially access or modify database information without directly seeing the results of the injection.