CVE-2026-7002: KLiK SocialMediaWebsite SQLi Poses Remote Risk
The National Vulnerability Database (NVD) has detailed CVE-2026-7002, a high-severity SQL injection vulnerability impacting KLiK SocialMediaWebsite up to version 1.0.1. This flaw resides within the /includes/get_message_ajax.php file, specifically in the Private Message Handler component. Attackers can exploit this by manipulating the c_id argument, leading to remote SQL injection.
This isn’t theoretical; the attack vector is remote, meaning any unauthenticated actor can potentially trigger it. With a CVSS score of 7.3 (HIGH), the impact includes potential information disclosure (C), integrity compromise (I), and availability disruption (A) — all rated Low, but still significant given the ease of exploitation (AV:N/AC:L/PR:N/UI:N). The NVD attributes this to CWE-74 (Improper Neutralization of Special Elements in Output) and CWE-89 (Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)).
Defenders running KLiK SocialMediaWebsite must treat this as a critical patching priority. SQL injection is a gateway to full database compromise, data exfiltration, and further system pivots. Given the unspecified nature of affected products beyond the base application, organizations should assume they are vulnerable if running any version up to 1.0.1 and act accordingly.
What This Means For You
- If your organization uses KLiK SocialMediaWebsite, immediately identify all instances running versions up to 1.0.1. Prioritize patching or implementing compensating controls to prevent remote SQL injection via CVE-2026-7002. Audit logs for suspicious activity related to `/includes/get_message_ajax.php` and `c_id` parameter manipulation.
Related ATT&CK Techniques
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
CVE-2026-7002: KLiK SocialMediaWebsite SQLi in get_message_ajax.php
title: CVE-2026-7002: KLiK SocialMediaWebsite SQLi in get_message_ajax.php
id: scw-2026-04-25-ai-1
status: experimental
level: high
description: |
Detects attempts to exploit CVE-2026-7002 by targeting the get_message_ajax.php file with SQL injection payloads. The rule looks for the specific file path and common SQL keywords within the query string, indicating a potential manipulation of the 'c_id' parameter.
author: SCW Feed Engine (AI-generated)
date: 2026-04-25
references:
- https://shimiscyberworld.com/posts/nvd-CVE-2026-7002/
tags:
- attack.initial_access
- attack.t1190
logsource:
category: webserver
detection:
selection:
cs-uri|contains:
- '/includes/get_message_ajax.php'
cs-uri-query|contains:
- 'c_id='
cs-uri-query|contains:
- 'UNION'
cs-uri-query|contains:
- 'SELECT'
cs-uri-query|contains:
- 'FROM'
condition: selection
falsepositives:
- Legitimate administrative activity
Source: Shimi's Cyber World · License & reuse
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-7002 | SQLi | KLiK SocialMediaWebsite up to 1.0.1 |
| CVE-2026-7002 | SQLi | File: /includes/get_message_ajax.php |
| CVE-2026-7002 | SQLi | Component: Private Message Handler |
| CVE-2026-7002 | SQLi | Vulnerable argument: c_id |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | April 26, 2026 at 01:16 UTC |
This content was AI-rewritten and enriched by Shimi's Cyber World based on the original source. All intellectual property rights remain with the original author.
Believe this infringes your rights? Submit a takedown request.
Related coverage
Daily Security Digest — 2026-04-25
2 vulnerability disclosures (2 High) and 1 curated intelligence stories from 1 sources.
CVE-2026-6994 — A weakness has been identified in Envoy up to 1.33.0.
CVE-2026-6994 — A weakness has been identified in Envoy up to 1.33.0. Affected is the function params.add of the file source/extensions/filters/http/header_mutation/header_mutation.cc of the component Query...
CVE-2026-6993 — Go-Kratos Kratos Vulnerability
CVE-2026-6993 — A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the...