Skip to contentNaviwebs Navigate Cms vulnerabilities
- navigate cms, naviwebs navigate cms +1 moreNavigate CMS 2.8.7 - Cross-Site Request ForgeryCVE-2020-370545.1 Medium
- navigate cms, naviwebs navigate cms +1 moreNavigate CMS 2.8.7 - ''sidx' SQL InjectionCVE-2020-370537.1 High
- naviwebs navigate cmsA Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote...CVE-2022-28117Public exploitEPSS 22.9%4.9 Medium
- naviwebs navigate cmsA reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of...CVE-2021-442995.4 Medium
- naviwebs navigate cmsAn arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download...CVE-2021-443517.5 High
- naviwebs navigate cmsSQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib...CVE-2021-364558.8 High
- naviwebs navigate cmsCross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse...CVE-2021-364545.4 Medium
- naviwebs navigate cmsSQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate...CVE-2020-237119.8 Critical
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is...CVE-2020-140186.1 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information...CVE-2020-140177.5 High
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to...CVE-2020-140165.3 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is...CVE-2020-140157.5 High
- naviwebs navigate cmsAn issue was discovered in Navigate CMS 2.9 r1433. The query parameter fid on the resource...CVE-2020-140145.4 Medium
- naviwebs navigate cmsNavigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases ...CVE-2020-149274.8 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib...CVE-2020-137955.3 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...CVE-2020-137966.1 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...CVE-2020-137976.1 Medium
- naviwebs navigate cmsAn issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify...CVE-2020-137986.1 Medium
- naviwebs navigate cmsNavigate CMS has Stored XSS via the navigate.php Title field in an edit action.CVE-2018-180295.4 Medium
- naviwebs navigate cmsNavigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a...CVE-2018-178495.4 Medium
- naviwebs navigate cmsAn "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in...CVE-2018-17553Public exploitEPSS 79.0%8.8 High
- naviwebs navigate cmsSQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass...CVE-2018-17552Public exploitEPSS 84.1%9.8 Critical