A vulnerability identified as critical has been detected in VictorAlagwu CMSsite 1.0. This issue affects some unknown processing of the file category.php of the component GET Request Handler. Performing a manipulation of the argument cat_id results in sql injection.
This vulnerability is cataloged as CVE-2019-25697. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.