104 matches found
CVE-2020-23711: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php...
CVE-2020-23654
NavigateCMS 2.9 is affected by Cross Site Scripting XSS via the module "Shop."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS via the module "Shop."...
Cross site scripting
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23657
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23656
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Content."...
CVE-2020-23656
CVE-2020-23656 affects NavigateCMS 2.9, with a Cross Site Scripting (XSS) flaw in the Content module. The available sources consistently identify the affected component as the Content module, but they do not provide specifics about the payload, exploit path, affected subcomponents, or exact versi...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...
CVE-2020-23655
NavigateCMS 2.9 is affected by Cross-Site Scripting (XSS) in the Configuration module (CVE-2020-23655). The connected documents consistently identify XSS as the vulnerability type and the affected component/module, with no detailed exploit steps, vectors, or affected versions beyond NavigateCMS 2...
CVE-2020-23654
NavigateCMS 2.9 is affected by Cross Site Scripting XSS via the module "Shop."...
CVE-2020-23654
NavigateCMS 2.9 is affected by Cross-Site Scripting (XSS) via the Shop/Store module. The issue is consistently described across multiple sources (NVD, Red Hat advisory, CNVD, etc.) as an XSS vulnerability in NavigateCMS 2.9, but the provided documents do not specify the exact root cause, vulnerab...