漏洞描述
IdeaCMS up to 1.7 is vulnerable to SQL injection via the field parameter in article and product query interfaces. This template uses a time-based payload to safely detect the vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
vuldb.comhttps://vuldb.com/?submit.588372↗vuldb.comhttps://vuldb.com/?ctiid.311027↗gitee.comhttps://gitee.com/ideacms/ideacms/releases/tag/v1.8↗gitee.comhttps://gitee.com/ideacms/ideacms/issues/ICBVWE#note_42016626_link↗gitee.comhttps://gitee.com/ideacms/ideacms/commit/935aceb4c21338633de6d41e13332f7b9db4fa6a↗vuldb.comhttps://vuldb.com/?id.311027↗gitee.comhttps://gitee.com/ideacms/ideacms/issues/ICBVWE↗