Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 8:55 p.m.•15 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS7.5AI score0.02483EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/27 12:00 a.m.•66 views

Navigate CMS sql injection vulnerability (CNVD-2021-57420)

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the template-properties-order parameter in templates.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backe...

9.8CVSS9.7AI score0.02483EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/07/26 6:15 p.m.•18 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS6AI score0.02483EPSS
SaveExploits1References3
Prion
Prion
•added 2021/07/26 6:15 p.m.•25 views

Sql injection

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

7.5CVSS9.5AI score0.02483EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2021/07/26 6:15 p.m.•12 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS7.4AI score0.02483EPSS
SaveExploits1References4
Mend
Mend
•added 2021/07/26 5:15 p.m.•7 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in "templates.php" is vulnerable to sql injection on parameter "template-properties-order", which results in arbitrary sql query execution in the backend database...

9.8CVSS0.02483EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/26 12:00 a.m.•4 views

CVE-2021-37475: Improper Neutralization of Special Elements used in an SQL Command

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS6AI score0.02483EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/26 12:00 a.m.•23 views

NavigateCMS SQL注入漏洞

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the template-properties-order parameter in templates.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backe...

9.8CVSS6.1AI score0.02483EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/07/22 12:00 a.m.•3 views

PT-2021-3880

Name of the Vulnerable Software and Affected Versions NavigateCMS versions 2.9.4 and below Description The issue is related to a sql injection vulnerability in the templates.php function, specifically affecting the template-properties-order parameter. This vulnerability allows for the execution o...

9.8CVSS0.02483EPSS
SaveExploits1References8
Rows per page
Query Builder