CVE-2026-3325
CriticalSummary
MegaCMS version 12.0.0 has an SQL injection (SQLi) vulnerability in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The issue arises from inadequate validation and sanitization of user input.
Risk Assessment
An unauthenticated attacker can manipulate the “id_territorio” parameter in a POST request, allowing for the execution of arbitrary SQL queries. This could lead to data leakage or database compromise.
Recommendation
It is recommended to implement proper validation and sanitization mechanisms for user input to secure the application against SQL injection. Additionally, consider restricting access to the endpoint for unauthorized users.
Original NVD description (English source)
SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and sanitisation of user input. Specifically, via a POST request, the “id_territorio” parameter, used immediately after the registration form is submitted, could be manipulated by an unauthenticated attacker to execute arbitrary SQL queries.