Jacek Czepil

**Name of the Vulnerable Software and Affected Versions** Redeight CMS version 1.0 **Description** An SQL Injection occurs when user input is not properly sanitized and is directly interpolated into SQL queries without the use of prepared statements. This allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information via the POST '/admin/index.php' endpoint using the `userEmail` parameter. **Recommendations** Update Redeight CMS version 1.0 to a version that implements prepared statements for the `userEmail` parameter in the '/admin/index.php' endpoint.

**Name of the Vulnerable Software and Affected Versions** Redeight CMS version 1.0 **Description** An unrestricted file upload flaw allows authenticated attackers to achieve Remote Code Execution. The issue occurs because the application does not validate file extensions or MIME types (the standard used to identify file formats). This allows the upload of arbitrary PHP scripts to the publicly accessible `/uploads/files/` directory, where they can be executed by the web server. The attack is performed via the POST `/admin/index.php?module=pages&mode=FileAdd` endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Redeight CMS version 1.0 **Description** The software uses the MD5 algorithm without a salt to store user passwords. Since MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can reverse them using rainbow tables, which are precomputed tables used to reverse cryptographic hash functions, leading to the exposure of plaintext credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Pro3W CMS versions prior to January 2026 **Description** Pro3W CMS is susceptible to SQL injection attacks. Insufficient input validation within the login form permits an unauthenticated attacker to circumvent authentication and obtain administrative access. The vulnerability exists in version 1.2.0. The `login form` is the entry point for this attack, and the vulnerability stems from improper neutralization of input. The vulnerable parameter is not explicitly identified. **Recommendations** Update to versions released in January 2026 or later.