CVE-2026-40330— Masa CMS SQL injection via sortDirection parameter in beanFeed

Masa CMS SQL injection via sortDirection parameter in beanFeed

Masa CMS is an open source content management system. In versions 7.2.0 through 7.2.9, 7.3.0 through 7.3.14, 7.4.0 through 7.4.9, and 7.5.0 through 7.5.2, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery function's handling of the sortDirection parameter. The parameter value is concatenated directly into SQL queries without sanitization or parameterization. An unauthenticated remote attacker can exploit this to extract sensitive information, modify or delete database records, or potentially achieve remote code execution on the underlying database server. This issue has been fixed in versions 7.2.10, 7.3.15, 7.4.10, and 7.5.3. As a workaround, use a WAF to block or restrict access to the beanFeed.cfc component, or deploy rules to detect SQL injection patterns targeting the sortDirection parameter.

N/A

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Masa CMS SQL注入漏洞

Masa CMS是Masa CMS组织的一个数字体验平台。 Masa CMS存在SQL注入漏洞，该漏洞源于beanFeed.cfc组件的getQuery函数对sortDirection参数处理不当，可能导致未经身份验证的远程攻击者执行SQL注入攻击。以下版本受到影响：7.2.0版本至7.2.9版本、7.3.0版本至7.3.14版本、7.4.0版本至7.4.9版本和7.5.0版本至7.5.2版本。

N/A

N/A