Vulnerabilities in Navarino

3 results

CVE-2018-5386—Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leakEPSS 4.6%CVE-2018-5384—Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injectionEPSS 4.4%CVE-2018-5385—Navarino Infinity web interface up to version 2.2 is prone to session fixation attacksEPSS 4.2%