369 matches found
Directory traversal
An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...
CVE-2020-13795
An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...
CVE-2020-13795
Navigate CMS 2.8.7 and earlier versions are affected by a directory traversal vulnerability in lib/packages/templates/template.class.php that mishandles ../ and ..\ substrings, enabling access to locations outside the restricted directory. The issue is described across multiple sources (NVD, Red ...
CVE-2020-13796
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php...
CVE-2020-13796
Navigate CMS vulnerability CVE-2020-13796 affects versions up to 2.8.7. The issue is an XSS flaw caused by a lack of purify calls in lib/packages/structure/structure.class.php, enabling injection of client-side script. Exploitation details are not provided in the connected documents; no patch/ver...
CVE-2020-13797
Navigate CMS
CVE-2020-13797
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php...
CVE-2020-13798
Summary: Navigate CMS up to version 2.8.7 has a stored? or reflected? XSS due to missing purify calls in lib/packages/feeds/feed.class.php. The linked documents repeatedly describe an XSS flaw in Navigate CMS 2.8.7 and earlier, but do not provide concrete exploit steps, affected sub-versions beyo...
CVE-2020-13798
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...
CVE-2020-13798: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...
CVE-2020-13797: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php...
CVE-2020-13795: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...
CVE-2020-13796: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php...
Code injection
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
Navigate CMS 2.8 File Upload
File upload vulnerability in Navigate CMS navigateupload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Navigate CMS 2.8.5 - Arbitrary File Download
Navigate CMS 2.8.5 - Arbitrary File Download Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link:...
Navigate CMS 2.8.5 - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version...
Navigate CMS 2.8.5 - Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
Navigate CMS 2.8.5 Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
