Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-17553
6.5
MEDIUMCVSS v2
Published
October 3, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.
NavigateCMS/Navigate-CMS
GitHubNavigate CMS, a very powerful open source content management system for everybody.
GitHubNavigate CMS, a very powerful open source content management system for everybody.= 2.8NVD