Remote SQL Injection Vulnerability in DeDeCMS

A remote SQL injection vulnerability (CVE-2026-76783) has been identified in DeDeCMS version 53_1_UTF8. The flaw resides within the /plus/advancedsearch.php file, where the 'sql' argument is insufficiently sanitized before being processed in a backend database query. This vulnerability allows remote, unauthenticated attackers to inject and execute arbitrary SQL commands against the underlying database. The vulnerability has been disclosed publicly, and functional exploit code is available, increasing the risk of exploitation by malicious actors targeting this specific version of the CMS.

Impact

Successful exploitation allows remote attackers to execute arbitrary SQL queries, which may result in unauthorized data exfiltration, database manipulation, or complete compromise of the application data. The vulnerability is rated with a CVSS v3.1 score of 7.3, reflecting its potential for impact on Confidentiality, Integrity, and Availability.

Recommendation

• Immediately audit web server logs for requests targeting '/plus/advancedsearch.php' containing suspicious SQL syntax within the 'sql' parameter.
• Review the application code for the vulnerable '/plus/advancedsearch.php' script and implement parameterized queries to neutralize the SQL injection vector.
• Deploy the Sigma rule provided in this brief to monitor for exploitation attempts against this endpoint.