Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Naviwebs Subscribe
Total 32 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-14018 1 Naviwebs 1 Navigate Cms 2020-06-29 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User field and the E-Mail field. On the Edit user page, the XSS is only triggered via the E-Mail field; however, on the View user page the XSS is triggered via either the User field or the E-Mail field.
CVE-2020-14017 1 Naviwebs 1 Navigate Cms 2020-06-29 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticated user could use a brute-force approach to attempt to identify existing sessions, or view the contents of this file to discover details about a session.
CVE-2020-14927 1 Naviwebs 1 Navigate Cms 2020-06-24 3.5 LOW 4.8 MEDIUM
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.
CVE-2020-14067 1 Naviwebs 1 Navigatecms 2020-06-17 7.5 HIGH 9.8 CRITICAL
The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php.
CVE-2020-13795 1 Naviwebs 1 Navigate Cms 2020-06-04 5.0 MEDIUM 5.3 MEDIUM
An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings.
CVE-2020-13796 1 Naviwebs 1 Navigate Cms 2020-06-04 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php.
CVE-2020-13797 1 Naviwebs 1 Navigate Cms 2020-06-04 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php.
CVE-2020-13798 1 Naviwebs 1 Navigate Cms 2020-06-04 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php.
CVE-2018-18029 1 Naviwebs 1 Navigate Cms 2018-11-23 3.5 LOW 5.4 MEDIUM
Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
CVE-2018-17849 1 Naviwebs 1 Navigate Cms 2018-11-19 3.5 LOW 5.4 MEDIUM
Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a multipart/form-data JavaScript payload.
CVE-2018-17553 1 Naviwebs 1 Navigate Cms 2018-11-19 6.5 MEDIUM 8.8 HIGH
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.
CVE-2018-17552 1 Naviwebs 1 Navigate Cms 2018-11-19 7.5 HIGH 9.8 CRITICAL
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.