CVE-2019-25573 HIGH

CVE-2019-25573: Green CMS 2.x SQL Injection via cat Parameter

Vendor Greencms
Product Green CMS
Weakness CWE-89 · SQLi
Published March 21, 2026
Last update March 24, 2026

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Attackers can send GET requests to index.php with m=admin, c=posts, a=index parameters and inject SQL code in the cat parameter to manipulate database queries and extract sensitive information.

Key dates

02Disclosure timeline

March 21, 2026 CVE published
March 24, 2026 Record updated