CVE-2020-23656

Description

References

• NavigateCMS/Navigate-CMS · Exploit

navigatecms의 다른 취약점

• CVE-2020-23243보통 4.8Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
• CVE-2020-23242보통 4.8Cross Site Scripting (XSS) vulnerability in NavigateCMS 2.9 when performing a Create or Edit via the Tools feature.
• CVE-2021-37478심각 9.8In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitra…
• CVE-2021-37477심각 9.8In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which resu…
• CVE-2021-37476심각 9.8In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, w…