high8.8Public exploit code
CVE-2018-17553
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated at…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Navigate CMS - (Unauthenticated) Remote Code Execution (Metasploit)2018-10-08 · remote · php · Verified
Impact
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Naviwebs | Navigate Cms | Version 2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/NavigateCMS/Navigate-CMS/commit/2bdcb8b3c5bb23851a2115db96585f1ac8cb2d1e
- https://github.com/rapid7/metasploit-framework/pull/10704
- https://www.exploit-db.com/exploits/45561/
- https://github.com/NavigateCMS/Navigate-CMS/commit/2bdcb8b3c5bb23851a2115db96585f1ac8cb2d1e
- https://github.com/rapid7/metasploit-framework/pull/10704
- https://www.exploit-db.com/exploits/45561/