Lmxcms · Lmxcms · CVE-2023-1322
**Name of the Vulnerable Software and Affected Versions**
lmxcms version 1.41
**Description**
A critical issue was found in the function `reply` of the file `BookAction.class.php`. The manipulation of the argument `id` with the input `1) and updatexml(0,concat(0x7e,user()),1)#` leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For lmxcms version 1.41, as a temporary workaround, consider disabling the `reply` function of the `BookAction.class.php` file until a patch is available. Restrict access to the `id` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.