CVE-2021-37473
Assigner: mitre
Published: 2021-07-26T17:11:12
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database.
problemTypes: descriptions: description: n/a
type: text