CVE-2026-1105

HIGH

EasyCMS < 1.6 - SQL Injection via _order Parameter in UserAction.class.php

Title source: llm
STIX 2.1

Description

A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument _order leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.341697
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.341697
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.731465
Exploit, Issue Tracking, Mitigation, Third Party Advisory exploit issue-tracking
https://github.com/ueh1013/VULN/issues/15

Scores

CVSS v3 7.3
EPSS 0.0044
EPSS Percentile 35.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
easycms/easycms < 1.6
Published Jan 18, 2026
Tracked Since Feb 18, 2026