XOOPS CMS SQL Injection Vulnerability in gerar_pdf.php Endpoint

A SQL injection vulnerability has been identified in XOOPS CMS version 2.5.9. This vulnerability allows unauthenticated attackers to inject SQL code through the cid parameter in GET requests to the gerar_pdf.php endpoint. Exploitation of this vulnerability could lead to unauthorized manipulation of database queries and extraction of sensitive information from the database.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or modify sensitive database information.

Reproduction

To reproduce this vulnerability, send a GET request to the gerar_pdf.php endpoint with a malicious cid parameter that includes SQL injection payloads. This can be done using a web browser or a tool like curl or Postman.