EUVD-2020-6226

Malware in sbrugna...

CVE-2020-14067

The installfromhash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in checkupload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php...

Naviwebs Navigate CMS Code Issue Vulnerability

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in the installfromhash function in Naviwebs Navigate CMS version 2.9, which can be exploited by attackers to compromise confidentiality, integrity, and...

PT-2020-13874

Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.9 Description The issue concerns the install from hash functionality, which does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code. This is specifically found in the...