What’s Vulnerable › Vulnerabilities

CVE-2020-37053: Navigate CMS 2.8.7 - ''sidx' SQL Injection

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-30 · updated 2026-06-17
• Weakness: CWE-89

Description

Navigate CMS 2.8.7 contains an authenticated SQL injection vulnerability that allows attackers to leak database information by manipulating the 'sidx' parameter in comments. Attackers can exploit the vulnerability to extract user activation keys by using time-based blind SQL injection techniques, potentially enabling password reset for administrative accounts.

Affected products

• Naviwebs S.C. Navigate CMS: 2.8.7

References

• https://sourceforge.net/projects/navigatecms
• https://www.exploit-db.com/exploits/48545
• https://www.navigatecms.com/en/home
• https://www.vulncheck.com/advisories/navigate-cms-sidx-sql-injection

Get alerted when CVE-2020-37053 or the next vulnerability affects your stack