Unrated severityNVD Advisory· Published Jul 26, 2021· Updated Aug 4, 2024
CVE-2021-37475
CVE-2021-37475
Description
In NavigateCMS version 2.9.4 and below, function in templates.php is vulnerable to sql injection on parameter template-properties-order, which results in arbitrary sql query execution in the backend database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- NavigateCMS/NavigateCMSdescription
- Range: <=2.9.4
Patches
Vulnerability mechanics
References
2- gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4femitrex_refsource_MISC
- github.com/NavigateCMS/Navigate-CMS/issues/26mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.