Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Attackers can send GET requests to index.php with m=admin, c=posts, a=index parameters and inject SQL code in the cat parameter to manipulate database queries and extract sensitive information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2019-25573 Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat… https://www.cve.org/CVERecord?id=CVE-2019-25573
Post summary
The tweet announces that Green CMS 2.x has an authenticated SQL injection flaw (CVE‑2019‑25573) permitting arbitrary SQL execution.
CVE Alert: CVE-2019-25573 - Greencms - Green CMS - https://www.redpacketsecurity.com/cve-alert-cve-2019-25573-greencms-green-cms/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25573 #greencms #green-cms
Post summary
An alert was posted for CVE‑2019‑25573 (Greencms), but no further details or actionable information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | njtech | greencms | - | - | - |