Green CMS SQL Injection Vulnerability in Version 2.x

A SQL injection vulnerability has been identified in Green CMS versions 2.x. This issue allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code into the 'cat' parameter. Exploitation involves sending GET requests to 'index.php' with specific parameters that include the injected SQL. This vulnerability could be used to manipulate database queries and extract sensitive information.

Impact

Exploitation of this vulnerability allows for arbitrary SQL execution, which could lead to unauthorized data access or manipulation.

Reproduction

To reproduce this vulnerability, send a GET request to 'index.php' with the 'm=admin', 'c=posts', and 'a=index' parameters. Inject SQL code into the 'cat' parameter to execute arbitrary SQL queries on the database.