PT-2020-13874

Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.9 Description The issue concerns the install from hash functionality, which does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code. This is specifically found in the...

CVE-2008-4358: Improper Input Validation

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name...