Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Naviwebs Navigate CMS SQL注入漏洞
Vulnerability Description
Naviwebs Navigate CMS是美国Naviwebs公司的一套开源的内容管理系统（CMS）。 Naviwebs Navigate CMS 中存在SQL注入漏洞，该漏洞源于产品 libpackagescommentscomments.php 文件中的quicksearch未能过滤输入数据的特殊字符。攻击者可通过该漏洞执行非法SQL语句。以下产品及版本受到影响：Naviwebs Navigate CMS 2.9。
CVSS Information
N/A
Vulnerability Type
N/A