Lucene search
+L

Naviwebs Navigate CMS SQL Injection Vulnerability

🗓️ 09 Oct 2018 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 39 Views

Naviwebs Navigate CMS version 2.8 login.php has a structured query language injection allowing remote attackers to bypass authentication.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
zdt
zdt
Navigate CMS - Unauthenticated Remote Code Execution Exploit
8 Oct 201800:00
zdt
circl
Circl
CVE-2018-17552
4 Oct 201811:53
circl
cve
CVE
CVE-2018-17552
3 Oct 201820:00
cve
cvelist
Cvelist
CVE-2018-17552
3 Oct 201820:00
cvelist
dsquare
Dsquare
Navigate CMS 2.8 File Upload
18 Nov 201800:00
dsquare
exploitdb
Exploit DB
Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)
8 Oct 201800:00
exploitdb
kitploit
Kitploit
CVE-2018-17552
26 Aug 202607:35
kitploit
kitploit
Kitploit
CVE-2018-17553
29 Aug 202615:29
kitploit
nvd
NVD
CVE-2018-17552
3 Oct 201820:29
nvd
packetstorm
Packet Storm
Navigate CMS Unauthenticated Remote Code Execution
5 Oct 201800:00
packetstorm
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Oct 2018 00:00Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 39.8
EPSS0.8006
39