Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2018-17849

Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a multipart/form-data JavaScript payload.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Naviwebs
Products
Navigate Cms
CVE-2018-17553

An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.

CVSS 3.0 · 8.8 High EPSS 79.0% KEV · Not listed
Vendors
Naviwebs
Products
Navigate Cms
CVE-2018-17552

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.

CVSS 3.0 · 9.8 Critical EPSS 84.1% KEV · Not listed
Vendors
Naviwebs
Products
Navigate Cms