199 matches found
CVE-2020-13796
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php...
CVE-2020-13797
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php...
CVE-2020-13797
Navigate CMS
CVE-2020-13798
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...
CVE-2020-13798
Summary: Navigate CMS up to version 2.8.7 has a stored? or reflected? XSS due to missing purify calls in lib/packages/feeds/feed.class.php. The linked documents repeatedly describe an XSS flaw in Navigate CMS 2.8.7 and earlier, but do not provide concrete exploit steps, affected sub-versions beyo...
Navigate CMS 2.8 File Upload
File upload vulnerability in Navigate CMS navigateupload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Navigate CMS 2.8.5 - Arbitrary File Download
Navigate CMS 2.8.5 - Arbitrary File Download Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link:...
Navigate CMS 2.8.5 - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version...
Navigate CMS 2.8.5 Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
Navigate CMS 2.8.5 - Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
Cross site scripting
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
CVE-2018-18029 affects Navigate CMS. The vulnerability is a Stored XSS in the navigate.php Title field during an edit action. The connected documents confirm the issue exists in Navigate CMS and describe the injection point within the Title field, enabling stored script execution on edit. No expl...
Naviwebs Navigate CMS SQL Injection Vulnerability
Naviwebs Navigate CMS is an open source content management system CMS. A SQL injection vulnerability exists in the login.php file in Naviwebs Navigate CMS version 2.8. A remote attacker can exploit the vulnerability to bypass authentication...
Navigate CMS - Unauthenticated Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...