İçeriğe atla
Noroxi

naviwebs kayıtları

naviwebs üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %5,9
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 21
  4. 22
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

34 kayıt
  • CVE-2018-17552
    64Bu hafta

    SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    naviwebs · navigate cms3 Eki 2018

  • CVE-2018-17553
    59Planlayın

    An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allo

    YüksekCVSS 8,8SilahlaştırılmışEPSS %78

    naviwebs · navigate cms3 Eki 2018

  • CVE-2021-37475
    40Planlayın

    In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`,

    KritikCVSS 9,8İstismar yokEPSS %2

    naviwebs · navigatecms26 Tem 2021

  • CVE-2021-37476
    40Planlayın

    In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, w

    KritikCVSS 9,8İstismar yokEPSS %2

    naviwebs · navigatecms26 Tem 2021

  • CVE-2021-37473
    40Planlayın

    In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a pos

    KritikCVSS 9,8İstismar yokEPSS %2

    naviwebs · navigatecms26 Tem 2021

  • CVE-2021-37478
    40Planlayın

    In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitra

    KritikCVSS 9,8İstismar yokEPSS %2

    naviwebs · navigatecms26 Tem 2021

  • CVE-2021-37477
    40Planlayın

    In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which resu

    KritikCVSS 9,8İstismar yokEPSS %2

    naviwebs · navigatecms26 Tem 2021

  • CVE-2020-23711
    39İzleyin

    SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    naviwebs · navigate cms28 Haz 2021

  • CVE-2020-14067
    39İzleyin

    The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive tha

    KritikCVSS 9,8İstismar yokEPSS %1

    naviwebs · navigatecms14 Haz 2020

  • CVE-2021-36455
    35İzleyin

    SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    naviwebs · navigate cms6 Ağu 2021

  • CVE-2021-44351
    31İzleyin

    An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    naviwebs · navigate cms6 Oca 2022

  • CVE-2020-14015
    30İzleyin

    An issue was discovered in Navigate CMS 2.9 r1433.

    YüksekCVSS 7,5İstismar yokEPSS %1

    naviwebs · navigate cms24 Haz 2020

  • CVE-2020-14017
    30İzleyin

    An issue was discovered in Navigate CMS 2.9 r1433.

    YüksekCVSS 7,5İstismar yokEPSS %1

    naviwebs · navigate cms24 Haz 2020

  • CVE-2020-37053
    28İzleyin

    Navigate CMS 2.8.7 - ''sidx' SQL Injection

    YüksekCVSS 7,1İstismar yokEPSS %0

    naviwebs · navigate cms30 Oca 2026

  • CVE-2022-28117
    26İzleyin

    A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make ar

    OrtaCVSS 4,9Kavram kanıtıEPSS %22

    naviwebs · navigate cms28 Nis 2022

  • CVE-2020-14018
    24İzleyin

    An issue was discovered in Navigate CMS 2.9 r1433.

    OrtaCVSS 6,1İstismar yokEPSS %0

    naviwebs · navigate cms24 Haz 2020

  • CVE-2020-13798
    24İzleyin

    An issue was discovered in Navigate CMS through 2.8.7.

    OrtaCVSS 6,1İstismar yokEPSS %0

    naviwebs · navigate cms3 Haz 2020

  • CVE-2020-13796
    24İzleyin

    An issue was discovered in Navigate CMS through 2.8.7.

    OrtaCVSS 6,1İstismar yokEPSS %0

    naviwebs · navigate cms3 Haz 2020

  • CVE-2020-13797
    24İzleyin

    An issue was discovered in Navigate CMS through 2.8.7.

    OrtaCVSS 6,1İstismar yokEPSS %0

    naviwebs · navigate cms3 Haz 2020

  • CVE-2020-13795
    22İzleyin

    An issue was discovered in Navigate CMS through 2.8.7.

    OrtaCVSS 5,3İstismar yokEPSS %1

    naviwebs · navigate cms3 Haz 2020

  • CVE-2020-14016
    21İzleyin

    An issue was discovered in Navigate CMS 2.9 r1433.

    OrtaCVSS 5,3İstismar yokEPSS %1

    naviwebs · navigate cms24 Haz 2020

  • CVE-2020-14014
    21İzleyin

    An issue was discovered in Navigate CMS 2.8 and 2.9 r1433.

    OrtaCVSS 5,4İstismar yokEPSS %0

    naviwebs · navigate cms24 Haz 2020

  • CVE-2018-18029
    21İzleyin

    Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.

    OrtaCVSS 5,4İstismar yokEPSS %0

    naviwebs · navigate cms9 Eki 2018

  • CVE-2021-36454
    21İzleyin

    Cross Site Scripting (XSS) vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1) backups\backups.php, 2) block

    OrtaCVSS 5,4İstismar yokEPSS %0

    naviwebs · navigate cms6 Ağu 2021

  • CVE-2018-17849
    21İzleyin

    Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a multipart/form-data JavaScript payload.

    OrtaCVSS 5,4İstismar yokEPSS %0

    naviwebs · navigate cms4 Eki 2018