NavigateCMS Access Control Error Vulnerability

NavigateCMS is a content management system. An access control error vulnerability exists in version 2.9 of NavigateCMS, which stems from the fact that the ID in the product/navigate/navigatedownload.php file does not properly validate the data entered. An attacker could exploit this vulnerability...

CVE-2021-44351

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigatedownload.php id parameter...

CVE-2021-44351

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigatedownload.php id parameter...

CVE-2021-44351

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigatedownload.php id parameter...

libsepol security update

2.9-3 - cil: Fix out-of-bound read of file context pattern ending with '' - cil: Destroy classperms list when resetting classpermission 1983517 - cil: Destroy classperm list when resetting map perms 1983521 - cil: cilresetclasspermsset should not reset classpermission 1983525 - cil: Set class...

CVE-2021-36455

SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php...

Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2021-57428)

A cross-site scripting vulnerability exists in Navigate CMS version 2.9, which is a powerful and intuitive content management system. The vulnerability can be exploited to conduct cross-site scripting attacks via the name="wrongpathredirect" function...

Navigate CMS Cross-Site Scripting Vulnerability (CNVD-2021-57427)

Navigate CMS, a powerful and intuitive content management system, is vulnerable to a cross-site scripting vulnerability in Navigate CMS version 2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via the "Create" or "Edit" function of the "Tools" feature...

CVE-2020-23243

Cross Site Scripting XSS vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrongpathredirect" feature...

CVE-2020-23242

Cross Site Scripting XSS vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrongpathredirect" feature...

CVE-2020-23243

Cross Site Scripting XSS vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrongpathredirect" feature...

CVE-2020-23242

Cross Site Scripting XSS vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature...

CVE-2020-23242

NavigateCMS 2.9 is affected by a Cross Site Scripting (XSS) vulnerability when using the Create or Edit actions via the Tools feature. The issue is documented across multiple sources (including Red Hat, CNVD, CVE listings) with consistent description: XSS in NavigateCMS 2.9 during Create/Edit in ...

NavigateCMS和NavigateCMS 跨站脚本漏洞

Navigate CMS, a powerful and intuitive content management system, is vulnerable to a cross-site scripting vulnerability in Navigate CMS version 2.9. The vulnerability can be exploited to conduct cross-site scripting attacks via the "Create" or "Edit" function of the "Tools" feature...

Navigate CMS SQL Injection Vulnerability

Navigate CMS is a powerful and intuitive content management system. A SQL injection vulnerability exists in Navigate CMS version 2.9. The vulnerability can be exploited to conduct SQL injection attacks via URL-encoded GET input categories in navigate.php...

CVE-2020-23711

SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php...

NavigateCMS SQL注入漏洞

Navigate CMS is a powerful and intuitive content management system. A SQL injection vulnerability exists in Navigate CMS version 2.9. The vulnerability can be exploited to conduct SQL injection attacks via URL-encoded GET input categories in navigate.php...

WordPress Login Protection – Limit Failed Login Attempts plugin <= 2.8 - Arbitrary Plugin Installation and Activation vulnerability

Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress Login Protection – Limit Failed Login Attempts plugin versions = 2.8. Solution Update the WordPress Login Protection – Limit Failed Login Attempts plugin to the latest available version at least 2.9...