327 matches found
CVE-2020-13798
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...
CVE-2020-13798
Summary: Navigate CMS up to version 2.8.7 has a stored? or reflected? XSS due to missing purify calls in lib/packages/feeds/feed.class.php. The linked documents repeatedly describe an XSS flaw in Navigate CMS 2.8.7 and earlier, but do not provide concrete exploit steps, affected sub-versions beyo...
Code injection
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...
Navigate CMS 2.8 File Upload
File upload vulnerability in Navigate CMS navigateupload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Navigate CMS 2.8.5 - Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version...
Navigate CMS 2.8.5 - Arbitrary File Download
Navigate CMS 2.8.5 - Arbitrary File Download Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link:...
Navigate CMS 2.8.5 - Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
Navigate CMS 2.8.5 Arbitrary File Download
Exploit Title: Navigate CMS 2.8.5 - Arbitrary File Download Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.navigatecms.com/ Software Link: http://master.dl.sourceforge.net/project/navigatecms/releases/navigate-2.8.5r1355.zip Version: 2.8.5 Category: Webapps...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
Cross site scripting
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
CVE-2018-18029
CVE-2018-18029 affects Navigate CMS. The vulnerability is a Stored XSS in the navigate.php Title field during an edit action. The connected documents confirm the issue exists in Navigate CMS and describe the injection point within the Title field, enabling stored script execution on edit. No expl...
CVE-2018-18029
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action...
Naviwebs Navigate CMS SQL Injection Vulnerability
Naviwebs Navigate CMS is an open source content management system CMS. A SQL injection vulnerability exists in the login.php file in Naviwebs Navigate CMS version 2.8. A remote attacker can exploit the vulnerability to bypass authentication...
Navigate CMS - Unauthenticated Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
Navigate CMS Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Navigate CMS Unauthenticated Remote Code Execution', 'Description' = %q This module exploits insufficient sanitization in the database::protect...
CVE-2018-17849
Navigate CMS 2.8 has Stored XSS via a navigateupload.php aka File Upload request with a multipart/form-data JavaScript payload...