EUVD-2021-24042

Malware in sbrugna...

CVE-2021-37477

In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...

Navigate CMS sql injection vulnerability (CNVD-2021-57422)

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the childrenorder parameter in structure.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backend database...

CVE-2021-37477

In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...

Sql injection

In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...

CVE-2021-37477

In NavigateCMS version 2.9.4 and below, function in "structure.php" is vulnerable to sql injection on parameter "childrenorder", which results in arbitrary sql query execution in the backend database...

CVE-2021-37477

In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...

CVE-2021-37477: Improper Neutralization of Special Elements used in an SQL Command

In NavigateCMS version 2.9.4 and below, function in structure.php is vulnerable to sql injection on parameter childrenorder, which results in arbitrary sql query execution in the backend database...

PT-2021-21690

Name of the Vulnerable Software and Affected Versions NavigateCMS versions 2.9.4 and below Description The issue concerns a function in the structure.php file that is vulnerable to sql injection on the parameter children order. This vulnerability allows for the execution of arbitrary sql queries ...

CVE-2005-2537

FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php...

CVE-2005-2537: Undefined Security Weakness

FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php...

CVE-2005-2539: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the 1 bodycolor, 2 backimage, 3 theme, or 4 logo parameter to structure.php, 5 admin, 6 adminmail, or 7 back parameter to footer.php,...