Most recent entries from all

EUVD-2026-29389

fkie_cve-2021-36455

SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php.

GHSA-jxm8-2c34-9c94

SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php.

gsd-2021-36455

jvndb-2021-002282

Navigate CMS is an open source Contents Management System (CMS) provided by Naviwebs S.C. Navigate CMS contains multiple vulnerabilities listed below. * Reflected cross-site scripting in the Help feature (CWE-79) * Reflected cross-site scripting (CWE-79) - CVE-2021-36454 * SQL injection (CWE-89) - CVE-2021-36455 Duong Xuan Hiep (Hydrasky) of VNCERT/CC reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC in order to notify users of the solutions via JVN.