Known Vulnerabilities for Navigatecms by Naviwebs

Listed below are 10 of the newest known vulnerabilities associated with "Navigatecms" by "Naviwebs".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2021-37478	In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which res...	9.8 - CRITICAL	2021-07-26	2021-08-03
CVE-2021-37477	In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_ord...	9.8 - CRITICAL	2021-07-26	2021-07-28
CVE-2021-37476	In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a ...	9.8 - CRITICAL	2021-07-26	2021-07-28
CVE-2021-37475	In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-pro...	9.8 - CRITICAL	2021-07-26	2021-07-28
CVE-2021-37473	In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order...	9.8 - CRITICAL	2021-07-26	2021-07-28
CVE-2020-23655	NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."	5.4 - MEDIUM	2020-08-26	2020-08-26
CVE-2020-23654	NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."	5.4 - MEDIUM	2020-08-26	2020-08-26
CVE-2020-23243	Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.	4.8 - MEDIUM	2021-07-26	2021-07-30
CVE-2020-23242	Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature.	4.8 - MEDIUM	2021-07-26	2021-07-30
CVE-2020-14067	The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ...	9.8 - CRITICAL	2020-06-15	2020-06-17

Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Naviwebs	Navigatecms	2.9	All	All	All

Popular searches for Navigatecms

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].