EIP-2026-113239

This advisory describes a SQL injection vulnerability in WebAdministrator Lite CMS, where the 's' parameter in download.php is not properly sanitized. The document provides details on the vulnerability, affected versions, and a proof-of-concept URL but does not include functional exploit code.