CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/07/2021 |
| CVE-2021-37476 | CRITIQUE9.8 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database. | 26/07/2021 |
| CVE-2021-37475 | CRITIQUE9.8 | In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database. | 26/07/2021 |
| CVE-2021-37473 | CRITIQUE9.8 | In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database. | 26/07/2021 |
| CVE-2020-23657 | MOYENNE5.4 | NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." | 26/08/2020 |
| CVE-2020-23656 | MOYENNE5.4 | NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content." | 26/08/2020 |
| CVE-2020-23655 | MOYENNE5.4 | NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration." | 26/08/2020 |
| CVE-2020-23654 | MOYENNE5.4 | NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop." | 26/08/2020 |
| CVE-2020-14067 | CRITIQUE9.8 | The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php. | 15/06/2020 |