Vulnerabilities CVE-2019-25573

CVE-2019-25573

High

Open

TLP:CLEAR

Green CMS 2.x SQL Injection via cat Parameter

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Attackers can send GET requests to index.php with m=admin, c=posts, a=index parameters and inject SQL code in the cat parameter to manipulate database queries and extract sensitive information.

Details

CVSS Score: 7.1
EPSS Score ⓘ: 0.34%

27.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Mar 21, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.