369 matches found
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
Cross site scripting
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
CVE-2018-18029 affects Navigate CMS. The vulnerability is a Stored XSS in the navigate.php Title field during an edit action. The connected documents confirm the issue exists in Navigate CMS and describe the injection point within the Title field, enabling stored script execution on edit. No expl...
CVE-2018-18029: Improper Neutralization of Input During Web Page Generation
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
Naviwebs Navigate CMS SQL Injection Vulnerability
Naviwebs Navigate CMS is an open source content management system CMS. A SQL injection vulnerability exists in the login.php file in Naviwebs Navigate CMS version 2.8. A remote attacker can exploit the vulnerability to bypass authentication...
Navigate CMS - Unauthenticated Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
CVE-2018-17849
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...
CVE-2018-17849
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...
Unrestricted file upload
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...
CVE-2018-17849
Navigate CMS 2.8 is affected by a Stored XSS vulnerability in the navigate_upload.php (File Upload) request, triggered by a multipart/form-data JavaScript payload. The CVE-2018-17849 entry documents the issue, but the provided sources do not include a concrete fix or patched version. No exploitat...
CVE-2018-17849
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...
CVE-2018-17849: Improper Neutralization of Input During Web Page Generation
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...
CVE-2018-17553
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigateupload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigateinfo.php...
CVE-2018-17553
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigateupload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigateinfo.php...
CVE-2018-17552
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...