Vulnerability · Published Dec 17, 2025 · Assigned by VulnCheck
CVE-2023-53926PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter
Critical 9.8
In plain English
A critical-severity SQL injection in Simple CMS from PHPJabbers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.6%top 50.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries. Attackers can inject crafted SQL payloads through the 'column' parameter in the index.php endpoint to potentially extract or modify database information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHPJabbers | Simple CMS | 5.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-51416 exploit
- Official Product Homepage product
- VulnCheck Advisory: PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter third-party-advisory