Critical · 9.8 CVE-2021-36503 EUVD-2021-23105GHSA-53w3-ppjp-j9r6

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php …

Published Feb 3, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.