CVE-2026-111685 Details

A SQL injection vulnerability has been identified in IceCMS versions through 4.1.5. The issue resides in the WebResource and WebArticle controllers, specifically within the findresourcebynum and findarticlesbynum endpoints. These endpoints allow unauthenticated remote attackers to inject SQL by manipulating the num path parameter. The vulnerability arises because the application concatenates the num parameter directly into the SQL query's LIMIT clause without proper sanitization. This flaw can be exploited using union-based or blind SQL injection techniques to extract sensitive database information.

The vulnerability can be addressed by updating the num path variable to an Integer type, preventing non-numeric input from being injected into the SQL query. Additionally, user input should be validated and sanitized before being used in SQL commands.