CVE-2019-25697
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Apr 12, 2026
Vendor
unknown
Description
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attackers can send GET requests to category.php with malicious cat_id values to extract sensitive database information including usernames and credentials.