Report: CVE-2019-25697 - CMSsite 1.0 SQL Injection via category.php - 2025 Update

Report: CVE-2019-25697 - CMSsite 1.0 SQL Injection via category.php - 2025 Update

CVE ID :CVE-2019-25697 Published : April 12, 2026, 12:28 p.m. | 37 minutes ago Description :CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attackers can send GET requests to category.php with malicious cat_id values to extract sensitive database information including usernames and credentials. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
April 12, 2026
Affected Product: php
Impact: SQL injection