classcms kayıtları
classcms üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-266 Incorrect Privilege Assignment1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-57099İstismar yok | ClassCMS v4.8 has a code execution vulnerability.classcms · classcms · CWE-94 | Kritik9,8 | — | %0,7 | 3 Şub 2025 |
39İzleyin | CVE-2024-48180İstismar yok | ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/teclasscms · classcms · CWE-434 | Kritik9,8 | — | %0,6 | 16 Eki 2024 |
31İzleyin | CVE-2022-25581Kavram kanıtı | Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload.classcms · classcms · CWE-434 | Yüksek7,8 | — | %1,2 | 18 Mar 2022 |
21İzleyin | CVE-2024-8144İstismar yok | ClassCMS Logo admin cross site scriptingclasscms · classcms · CWE-79 | Orta5,3 | — | %0,4 | 25 Ağu 2024 |
20İzleyin | CVE-2024-12503İstismar yok | ClassCMS Model Management Page admin cross site scriptingclasscms · classcms · CWE-79 | Orta5,1 | — | %0,5 | 11 Ara 2024 |
20İzleyin | CVE-2024-12666İstismar yok | ClassCMS User Management Page admin insufficient privilegesclasscms · classcms · CWE-266 | Orta5,1 | — | %0,5 | 16 Ara 2024 |
20İzleyin | CVE-2024-8145İstismar yok | ClassCMS Article admin cross site scriptingclasscms · classcms · CWE-80 | Orta5,1 | — | %0,4 | 25 Ağu 2024 |
19İzleyin | CVE-2024-57097İstismar yok | ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.classcms · classcms · CWE-79 | Orta4,8 | — | %0,2 | 3 Şub 2025 |
- CVE-2024-5709939İzleyin
ClassCMS v4.8 has a code execution vulnerability.
KritikCVSS 9,8İstismar yokEPSS %1classcms · classcms3 Şub 2025
- CVE-2024-4818039İzleyin
ClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/te
KritikCVSS 9,8İstismar yokEPSS %1classcms · classcms16 Eki 2024
- CVE-2022-2558131İzleyin
Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload.
YüksekCVSS 7,8Kavram kanıtıEPSS %1classcms · classcms18 Mar 2022
- CVE-2024-814421İzleyin
ClassCMS Logo admin cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0classcms · classcms25 Ağu 2024
- CVE-2024-1250320İzleyin
ClassCMS Model Management Page admin cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %1classcms · classcms11 Ara 2024
- CVE-2024-1266620İzleyin
ClassCMS User Management Page admin insufficient privileges
OrtaCVSS 5,1İstismar yokEPSS %1classcms · classcms16 Ara 2024
- CVE-2024-814520İzleyin
ClassCMS Article admin cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0classcms · classcms25 Ağu 2024
- CVE-2024-5709719İzleyin
ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.
OrtaCVSS 4,8İstismar yokEPSS %0classcms · classcms3 Şub 2025