Security Advisory
CVE-2021-36503
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.