Loading vulnerability…
SQL Injection in CMSsite 1.0 category.php cat_id Parameter
CVE-2019-25697 is an unauthenticated SQL injection vulnerability in CMSsite 1.0. The flaw is present in the cat_id parameter processed by category.php. By sending crafted GET requests with malicious SQL syntax in cat_id, an attacker can manipulate backend database queries. According to the provided content, successful exploitation allows extraction of sensitive database information, including usernames and credentials.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows a remote, unauthenticated attacker to read sensitive data from the application's backend database. The disclosed impact includes extraction of usernames and credentials. The provided CVSS information also indicates limited integrity impact due to attacker-controlled query manipulation, though no availability impact is described in the supplied content.
If you can’t patch tonight, do this now.
If an official fix is not available, restrict external access to the vulnerable application, especially category.php, through network controls, reverse proxy rules, or IP allowlisting where feasible. Implement web application firewall rules to detect and block SQL injection payloads targeting the cat_id parameter. Add server-side input validation to only accept expected numeric values for cat_id, and monitor logs for suspicious requests to category.php containing SQL metacharacters or anomalous query patterns.
Patch, then assume compromise.
Upgrade to a fixed version of CMSsite if one is available from the vendor or maintainer. In the vulnerable code path, eliminate dynamic SQL construction using untrusted input from cat_id and replace it with parameterized queries or prepared statements. Apply strict server-side validation and type enforcement for cat_id as an integer before it is used in any database operation. Review category.php and related database access code for similar injection patterns.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.