Creeper

**Name of the Vulnerable Software and Affected Versions** light0011 cms (affected versions not specified) **Description** A security flaw exists in the Query Builder component within the file App/Home/Controller/ChapterController.class.php. The `ChapterModel::searchChapter()` function is susceptible to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. This issue occurs through the manipulation of the `content` argument and can be exploited remotely. **Recommendations** As a temporary workaround, consider restricting the use of the `ChapterModel::searchChapter()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.