Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
NaviwebsNavigate Cms

10 matches found

CVE
CVE•added 2020/06/03 10:15 p.m.•68 views

CVE-2020-13795

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings.

5.3CVSS5.2AI score0.00322EPSS
CVE
CVE•added 2020/06/03 10:15 p.m.•44 views

CVE-2020-13798

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2020/06/03 10:15 p.m.•40 views

CVE-2020-13797

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2020/06/24 3:15 p.m.•37 views

CVE-2020-14014

An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to reflected XSS.

5.4CVSS5.5AI score0.00206EPSS
CVE
CVE•added 2020/06/03 10:15 p.m.•36 views

CVE-2020-13796

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php.

6.1CVSS5.9AI score0.0024EPSS
CVE
CVE•added 2020/06/24 3:15 p.m.•36 views

CVE-2020-14015

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a passwor...

7.5CVSS7.6AI score0.00245EPSS
CVE
CVE•added 2020/06/24 3:15 p.m.•33 views

CVE-2020-14016

An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a not_found message when the provided username or email address does n...

5.3CVSS5.2AI score0.00393EPSS
CVE
CVE•added 2020/06/24 3:15 p.m.•33 views

CVE-2020-14017

An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the conten...

7.5CVSS7.3AI score0.00387EPSS
CVE
CVE•added 2020/06/24 3:15 p.m.•32 views

CVE-2020-14018

An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field; howev...

6.1CVSS5.8AI score0.0021EPSS
CVE
CVE•added 2020/06/19 5:15 p.m.•31 views

CVE-2020-14927

Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.

4.8CVSS4.9AI score0.00235EPSS