Vulnerabilities
Report: CVE-2019-25697 - CMSsite 1.0 SQL Injection via category.php - 2025 Update
CVE ID :CVE-2019-25697 Published : April 12, 2026, 12:28 p.m. | 37 minutes ago Description :CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attackers can send GET requests to category.php with malicious cat_id values to extract sensitive database information including usernames and credentials. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
php
Impact:
SQL injection