CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be obtained or altered by an attacker with access to the administrative interface.Referenceshttps://jvn.jp/en/jp/JVN08026319/