Naviwebs vulnerabilities

Products

• Navigate Cms 22
• Navigatecms 12

Newest

• navigate cms, naviwebs navigate cms +1 more Navigate CMS 2.8.7 - Cross-Site Request Forgery CVE-2020-37054 5.1 MediumJanuary 30, 2026
• navigate cms, naviwebs navigate cms +1 more Navigate CMS 2.8.7 - ''sidx' SQL Injection CVE-2020-37053 7.1 HighJanuary 30, 2026
• naviwebs navigate cms A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote... CVE-2022-28117 Public exploit EPSS 22.9% 4.9 MediumApril 28, 2022
• naviwebs navigate cms A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of... CVE-2021-44299 5.4 MediumJanuary 19, 2022
• naviwebs navigate cms An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download... CVE-2021-44351 7.5 HighJanuary 6, 2022
• naviwebs navigate cms SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib... CVE-2021-36455 8.8 HighAugust 6, 2021
• naviwebs navigate cms Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse... CVE-2021-36454 5.4 MediumAugust 6, 2021
• naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name=... CVE-2020-23243 4.8 MediumJuly 26, 2021
• naviwebs navigatecms Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via... CVE-2020-23242 4.8 MediumJuly 26, 2021
• naviwebs navigatecms In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on... CVE-2021-37478 9.8 CriticalJuly 26, 2021
• naviwebs navigatecms In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql... CVE-2021-37477 9.8 CriticalJuly 26, 2021
• naviwebs navigatecms In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection... CVE-2021-37476 9.8 CriticalJuly 26, 2021
• naviwebs navigatecms In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql... CVE-2021-37475 9.8 CriticalJuly 26, 2021
• naviwebs navigatecms In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection... CVE-2021-37473 9.8 CriticalJuly 26, 2021
• naviwebs navigate cms SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate... CVE-2020-23711 9.8 CriticalJune 28, 2021
• naviwebs navigatecms NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." CVE-2020-23657 5.4 MediumAugust 26, 2020
• naviwebs navigatecms NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content." CVE-2020-23656 5.4 MediumAugust 26, 2020
• naviwebs navigatecms NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." CVE-2020-23655 5.4 MediumAugust 26, 2020
• naviwebs navigatecms NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop." CVE-2020-23654 5.4 MediumAugust 26, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is... CVE-2020-14018 6.1 MediumJune 24, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information... CVE-2020-14017 7.5 HighJune 24, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to... CVE-2020-14016 5.3 MediumJune 24, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is... CVE-2020-14015 7.5 HighJune 24, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS 2.9 r1433. The query parameter fid on the resource... CVE-2020-14014 5.4 MediumJune 24, 2020
• naviwebs navigate cms Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases ... CVE-2020-14927 4.8 MediumJune 19, 2020
• naviwebs navigatecms The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension... CVE-2020-14067 9.8 CriticalJune 15, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib... CVE-2020-13795 5.3 MediumJune 3, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify... CVE-2020-13796 6.1 MediumJune 3, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify... CVE-2020-13797 6.1 MediumJune 3, 2020
• naviwebs navigate cms An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify... CVE-2020-13798 6.1 MediumJune 3, 2020
• naviwebs navigate cms Navigate CMS has Stored XSS via the navigate.php Title field in an edit action. CVE-2018-18029 5.4 MediumOctober 9, 2018
• naviwebs navigate cms Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a... CVE-2018-17849 5.4 MediumOctober 4, 2018
• naviwebs navigate cms An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in... CVE-2018-17553 Public exploit EPSS 79.0% 8.8 HighOctober 3, 2018
• naviwebs navigate cms SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass... CVE-2018-17552 Public exploit EPSS 84.1% 9.8 CriticalOctober 3, 2018