Fanli2012 Native-PHP-CMS SQL Injection Vulnerability in fladmin/cat_dodel.php

A critical SQL injection vulnerability has been identified in Fanli2012 native-php-cms version 1.0. The issue arises in the file fladmin/cat_dodel.php, where the input parameter 'id' is not properly sanitized. This lack of input validation allows attackers to inject malicious SQL commands, potentially leading to unauthorized data access or manipulation. The vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Reproduction

To reproduce this vulnerability, send a request to fladmin/cat_dodel.php with a crafted 'id' parameter that includes SQL injection payloads. The lack of input filtering will allow the injected SQL to be executed, demonstrating the vulnerability.