{"id":"CVE-2020-36537","state":"PUBLISHED","title":"Everywhere CMS sql injection","description":"A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.","publishedAt":"2022-06-03T19:10:50.000Z","updatedAt":"2025-04-15T14:35:01.363Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"VulDB"},"assigner":"VulDB","products":["Everywhere CMS"],"affected":[{"vendor":"Everywhere","product":"CMS","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://vuldb.com/?id.159954"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:47:24.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/36xxx/CVE-2020-36537.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-36537","state":"PUBLISHED","datePublished":"2022-06-03T19:10:50.000Z","dateUpdated":"2025-04-15T14:35:01.363Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-06-03T00:00:00.000Z"},"containers":{"cna":{"title":"Everywhere CMS sql injection","descriptions":[{"lang":"en","value":"A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely."}],"affected":[{"vendor":"Everywhere","product":"CMS","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.159954","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 SQL Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-06-03T19:10:50.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"credits":[{"lang":"en","value":"Mostafa Farzaneh"}],"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2020-36537","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"Everywhere CMS sql injection"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"CMS","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"Everywhere"}]}},"credit":"Mostafa Farzaneh","data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"6.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-89 SQL Injection"}]}]},"references":{"reference_data":[{"name":"https://vuldb.com/?id.159954","refsource":"MISC","url":"https://vuldb.com/?id.159954"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.159954","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:30:08.266Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:14:19.131835Z","id":"CVE-2020-36537","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T14:35:01.363Z"}}]}}}