CVE-2020-23242

Description

References

• NavigateCMS/Navigate-CMS · Exploit

Mais vulnerabilidades de navigatecms

• CVE-2020-23243MÉDIO 4.8Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
• CVE-2021-37478CRÍTICO 9.8In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitra…
• CVE-2021-37477CRÍTICO 9.8In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which resu…
• CVE-2021-37476CRÍTICO 9.8In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, w…
• CVE-2021-37475CRÍTICO 9.8In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`,…