An authenticated SQL injection vulnerability in YzmCMS 7.5 poses a significant risk of total database compromise for affected installations.

This vulnerability is a SQL injection flaw located in the get_arrchildid function within the category controller, where the parentid parameter is not sanitized. An authenticated administrator can leverage this weakness to perform boolean-based blind SQL injection.

The ability to execute arbitrary SQL queries allows an attacker with administrative access to bypass data integrity controls, extract sensitive information, or modify database contents. Given the CVSS score of 7.2, this vulnerability represents a high risk to organizational data confidentiality and system integrity, as it provides a path for full database compromise.

Immediate Action: Monitor official YzmCMS release channels for a security patch addressing this SQL injection flaw and apply it as soon as it becomes available.

Proactive Monitoring: Review web server and database logs for anomalous queries originating from administrative accounts, specifically targeting the category controller endpoint.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block malicious SQL patterns in incoming requests to the administrative interface.

Public Exploit Available: Yes — a public proof-of-concept exists as documented in the provided reference repository.

Organizations currently running YzmCMS 7.5 should treat this vulnerability with high priority. While the attack requires administrative authentication, the potential for total database compromise necessitates immediate defensive measures, including the restriction of administrative access and the implementation of strict WAF filtering until a vendor-supplied patch is deployed.