critical9.8
CVE-2021-36503
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.
Impact
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Native-Php-Cms Project | Native-Php-Cms | Version 1.0 |