Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:55 p.m.4 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS7.5AI score0.02483EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/27 12:0 a.m.15 views

Navigate CMS sql injection vulnerability (CNVD-2021-57420)

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the template-properties-order parameter in templates.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backe...

9.8CVSS9.7AI score0.02483EPSS
Exploits1References1
OSV
OSV
added 2021/07/26 6:15 p.m.2 views

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

9.8CVSS6AI score0.02483EPSS
Exploits1References3
Prion
Prion
added 2021/07/26 6:15 p.m.13 views

Sql injection

In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database...

7.5CVSS9.5AI score0.02483EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.2 views

NavigateCMS SQL注入漏洞

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the template-properties-order parameter in templates.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backe...

9.8CVSS6.1AI score0.02483EPSS
Exploits1References4
Rows per page
Query Builder