2 matches found
CVE-2021-37477
In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...
9.8CVSS7.5AI score0.02162EPSS
SaveExploits1References1
CVE-2021-37477
In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...
9.8CVSS6AI score0.02162EPSS
SaveExploits1References3
20