CVE-2021-36503

CRITICAL CVSS: 9.8 Published: 2023-02-03 Modified: 2026-06-17

Description

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.

Affected Platforms

Native-Php-Cms Project Native-Php-Cms

Weakness Type

CWE-89, CWE-89

References