High severity7.5NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2023-53975

Description

Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Thedigitalcraft/Atomcms
cpe:2.3:a:thedigitalcraft:atomcms:2.0:*:*:*:*:*:*:*
AtomCMS/Atom.CMSllm-fuzzy
Range: = 2.0
Digicraft Software/Atom.CMSv5
Range: 2.0

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51086nvdExploitThird Party AdvisoryVDB Entry
www.vulncheck.com/advisories/atom-cms-unauthenticated-sql-injection-via-admin-index-pagenvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000