Mitigating PHP2Shell: Everything You Need to Know
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability, CVE-2026-79569, is a SQL injection in the 'sort' parameter of the /loadingmore and /typesortmovie endpoints in Movie_Recommend v1.0.0. The analysis is based on the detailed description provided in the GitHub markdown file. The attack chain involves user-controlled input from the 'sort' parameter being retrieved by request.getParameter("sort") in the IndexController.showloadmore method. This unsanitized input is then passed to Selectquery.setSort(), which stores the malicious payload. Finally, the MovieMapper.xml's selectBycategory query directly concatenates this unsanitized input into the ORDER BY ${sort} desc clause, leading to SQL injection. The presence of allowMultiQueries=true in the MySQL connection string further exacerbates the issue by allowing stacked queries. The identified functions represent the critical points in the code where the malicious input is handled, stored, and ultimately executed within the SQL query.
com.dream.controller.IndexController.showloadmoreIndexController.java
com.dream.po.Selectquery.setSortSelectquery.java
MovieMapper.selectBycategoryMovieMapper.xml