CVE-2018-17552

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

CVE-2018-17552

Navigate CMS 2.8 is affected by multiple vulnerabilities described across connected sources. The core CVE-2018-17552 issue is a SQL Injection in login.php that allows bypassing authentication via the navigate-user cookie. Additionally, related sources describe an unauthenticated remote code execu...

CVE-2018-17552: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

PT-2018-14051

Name of the Vulnerable Software and Affected Versions Naviwebs Navigate CMS version 2.8 Description The issue allows remote attackers to bypass authentication. This is achieved via the navigate-user cookie in the login.php file. Recommendations For Naviwebs Navigate CMS version 2.8, update the...