CVE-2016-5792

CVE-2016-5792 is a critical SQL injection vulnerability affecting Moxa SoftCMS versions prior to 1.5. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands through unspecified input fields, potentially leading to full compromise of the system. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.