Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2021-37475

EPSS 0.68% · P72
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-37475

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NavigateCMS SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NavigateCMS是一个内容管理系统。 NavigateCMS 存在SQL注入漏洞，该漏洞源于在NavigateCMS 2.9.4及以下版本中，structure.php中的函数很容易在参数children order上被sql注入。攻击者可利用该漏洞在后端数据库中任意执行sql查询。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-37475

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-37475

请登录查看更多情报信息。

Other References for CVE-2021-37475 (3)

Same Patch Batch · n/a · 2021-07-26 · 37 CVEs total

CVE-2020-23239Textpattern CMS跨站脚本漏洞
CVE-2020-18170Abloy Key Manager 安全漏洞
CVE-2020-18171TechSmith Snagit 安全漏洞
CVE-2020-18172Trezor Bridge 代码注入漏洞
CVE-2020-18173AgileBits 1Password 代码问题漏洞
CVE-2020-18174AutoHotkey 安全漏洞
CVE-2020-23234LavaLite 跨站脚本漏洞
CVE-2020-23238Evolution CMS 跨站脚本漏洞
CVE-2020-17952Twothink 安全漏洞
CVE-2020-18169TechSmith SnagIT 安全漏洞
CVE-2020-23240CMS Made Simple 跨站脚本漏洞
CVE-2020-23241CMS Made Simple 跨站脚本漏洞
CVE-2020-23242NavigateCMS和NavigateCMS 跨站脚本漏洞
CVE-2020-23243NavigateCMS 跨站脚本漏洞
CVE-2021-37555TX9 Automatic Food Dispenser 授权问题漏洞
CVE-2021-37576Linux kernel 缓冲区错误漏洞
CVE-2020-18428tinyexr commit 输入验证错误漏洞
CVE-2020-18430tinyexr 输入验证错误漏洞
CVE-2021-25804VideoLAN VLC media player 代码问题漏洞
CVE-2020-126813xlogic 3xLogic Infinias eIDC32 信任管理问题漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2021-37475

No comments yet

Leave a comment