Description
攻击者通过操作参数Field，可能导致SQL注入攻击。攻击可能获取服务器敏感数据。升级到版本1.8可以解决此问题。
IdeaCMS GetList.html商品SQL注入（CVE-2025-5569）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-5569
https://www.gm7.org/archives/19518
https://ddpoc.com/DVB-2025-9430.html
https://cve.imfht.com/detail/CVE-2025-5569?lang=en
https://nvd.nist.gov/vuln/detail/CVE-2025-5569
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5569.yaml
https://vuldb.com/?id.311027
https://pentest-tools.com/vulnerabilities-exploits/ideacms-17-sql-injection_27309
https://gitee.com/ideacms/ideacms/commit/935aceb4c21338633de6d41e13332f7b9db4fa6a