Lucene search
GoogleOSV:CVE-2018-17553HistoryOct 03, 2018 - 8:29 p.m.
CVE-2018-17553
2018-10-0320:29:15
Google
osv.dev
5
An “Unrestricted Upload of File with Dangerous Type” issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=…/…/…/navigate_info.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| navigate-cms | eq | latest |
Related
cve
cve
CVE-2018-17553
2018-10-03 20:29:15
checkpoint_advisories
checkpoint_advisories
Naviwebs Navigate CMS Directory Traversal (CVE-2018-17553)
2022-05-26 00:00:00
prion
prion
Design/Logic Flaw
2018-10-03 20:29:00
cvelist
cvelist
CVE-2018-17553
2018-10-03 20:00:00
nvd
nvd
CVE-2018-17553
2018-10-03 20:29:15
packetstorm
packetstorm
Navigate CMS Unauthenticated Remote Code Execution
2018-10-05 00:00:00
zdt
zdt
Navigate CMS - Unauthenticated Remote Code Execution Exploit
2018-10-08 00:00:00
dsquare
dsquare
Navigate CMS 2.8 File Upload
2018-11-18 00:00:00