CVE-2019-25573

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Attackers can send GET requests to index.php with m=admin, c=posts, a=index parameters and inject SQL code in the cat parameter to manipulate database queries and extract sensitive information.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Greencms	Green CMS	2.0

References

http://www.greencms.net/Broken Link
https://codeload.github.com/GreenCMS/GreenCMS/zip/betaProduct
https://www.exploit-db.com/exploits/46244Exploit, Third Party Advisory, VDB Entry
https://www.vulncheck.com/advisories/green-cms-2-x-sql-injection-via-cat-parameterThird Party Advisory

Timeline

Published: Mar 21, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2019

CVE-2019-255746.5Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by inj CVE-2019-255758.2SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inje CVE-2019-255768.2Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries b CVE-2019-255775.5SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by mani CVE-2019-255788.2phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting mal CVE-2019-255797.5phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipu CVE-2019-25587.3Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). Supported versio CVE-2019-255808.2ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malic CVE-2019-255817.5i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting CVE-2019-255826.5i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipu CVE-2019-255835.5RarmaRadio 2.72.3 contains a denial of service vulnerability in the Username field that allows local attackers to crash the application by s CVE-2019-255845.5RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash