Fanli2012 Native-PHP-CMS SQL Injection Vulnerability in fladmin/cat_edit.php

A critical SQL injection vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file fladmin/cat_edit.php, where the id parameter is not properly sanitized, allowing attackers to inject malicious SQL commands. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

To reproduce this vulnerability, send a request to fladmin/cat_edit.php with an unsanitized id parameter. The injected data can be crafted to exploit the SQL injection, such as using SQL functions to extract database information.