CVE-2025-50567 | Saurus CMS Community Edition 4.7.1 Query Parameter /e DB::prepare sql injection

A vulnerability classified as critical has been found in Saurus CMS Community Edition 4.7.1. The affected element is the function DB::prepare of the file /e of the component Query Parameter Handler. This manipulation causes sql injection.

This vulnerability is tracked as CVE-2025-50567. The attack is possible to be carried out remotely. No exploit exists.