JoomSky kayıtları
joomsky üreticisine ait 31 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %45,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9
- CWE-862 Missing Authorization6
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
31 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2018-6006Kavram kanıtı | SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.joomsky · js autoz · CWE-89 | Kritik9,8 | — | %19,2 | 17 Şub 2018 |
40Planlayın | CVE-2018-5994Kavram kanıtı | SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in ajoomsky · js jobs · CWE-89 | Kritik9,8 | — | %2,7 | 17 Şub 2018 |
40Planlayın | CVE-2025-30886İstismar yok | WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerabilityjoomsky · js help desk · CWE-89 | Kritik10,0 | — | %0,5 | 1 Nis 2025 |
39İzleyin | CVE-2019-17527İstismar yok | dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.joomsky · js jobs · CWE-89 | Kritik9,8 | — | %1,0 | 19 Ara 2019 |
39İzleyin | CVE-2025-32626İstismar yok | WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerabilityjoomsky · js job manager · CWE-89 | Kritik9,8 | — | %0,5 | 17 Nis 2025 |
39İzleyin | CVE-2025-32660İstismar yok | WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerabilityjoomsky · js job manager · CWE-434 | Kritik9,8 | — | %0,5 | 17 Nis 2025 |
39İzleyin | CVE-2024-43274İstismar yok | WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerabilityjoomsky · js help desk · CWE-862 | Kritik9,8 | — | %0,4 | 1 Kas 2024 |
36İzleyin | CVE-2018-6007Kavram kanıtı | CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.joomsky · js support ticket · CWE-352 | Yüksek8,8 | — | %2,3 | 29 Oca 2018 |
36İzleyin | CVE-2023-25444İstismar yok | WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerabilityjoomsky · js help desk · CWE-434 | Kritik9,1 | — | %0,8 | 17 May 2024 |
36İzleyin | CVE-2022-46838İstismar yok | WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerabilityjoomsky · js help desk · CWE-862 | Kritik9,1 | — | %0,7 | 13 Ara 2024 |
36İzleyin | CVE-2025-30878İstismar yok | WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerabilityjoomsky · js help desk · CWE-22 | Kritik9,1 | — | %0,6 | 1 Nis 2025 |
35İzleyin | CVE-2025-32146İstismar yok | WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerabilityjoomsky · js job manager · CWE-98 | Yüksek8,8 | — | %0,8 | 4 Nis 2025 |
35İzleyin | CVE-2018-21002İstismar yok | The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.joomsky · js help desk · CWE-352 | Yüksek8,8 | — | %0,7 | 27 Ağu 2019 |
35İzleyin | CVE-2018-20974İstismar yok | The js-jobs plugin before 1.0.7 for WordPress has CSRF.joomsky · js job manager · CWE-352 | Yüksek8,8 | — | %0,6 | 16 Ağu 2019 |
35İzleyin | CVE-2023-31087İstismar yok | WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)joomsky · js job manager · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
34İzleyin | CVE-2022-47151İstismar yok | WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerabilityjoomsky · js help desk · CWE-89 | Yüksek8,6 | — | %0,4 | 17 Nis 2024 |
32İzleyin | CVE-2025-32627İstismar yok | WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerabilityjoomsky · js job manager · CWE-98 | Yüksek8,1 | — | %0,9 | 11 Nis 2025 |
32İzleyin | CVE-2025-30901İstismar yok | WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerabilityjoomsky · js help desk · CWE-98 | Yüksek8,1 | — | %0,9 | 1 Nis 2025 |
30İzleyin | CVE-2025-30882İstismar yok | WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerabilityjoomsky · js help desk · CWE-22 | Yüksek7,5 | — | %0,6 | 1 Nis 2025 |
30İzleyin | CVE-2025-30880İstismar yok | WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerabilityjoomsky · js help desk · CWE-862 | Yüksek7,5 | — | %0,5 | 1 Nis 2025 |
26İzleyin | CVE-2023-28689İstismar yok | WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerabilityjoomsky · js job manager · CWE-862 | Orta6,5 | — | %0,5 | 9 Ara 2024 |
22İzleyin | CVE-2018-9183Kavram kanıtı | The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.joomsky · js jobs · CWE-79 | Orta5,4 | — | %2,2 | 2 Nis 2018 |
21İzleyin | CVE-2025-22206İstismar yok | Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomlajoomsky · js jobs · CWE-89 | Orta4,7 | — | %9,5 | 4 Şub 2025 |
21İzleyin | CVE-2022-46840İstismar yok | WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Controljoomsky · js help desk · CWE-862 | Orta5,4 | — | %0,5 | 13 Ara 2024 |
21İzleyin | CVE-2025-31867İstismar yok | WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerabilityjoomsky · js job manager · CWE-639 | Orta5,4 | — | %0,4 | 1 Nis 2025 |
- CVE-2018-600645Planlayın
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %19joomsky · js autoz17 Şub 2018
- CVE-2018-599440Planlayın
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a
KritikCVSS 9,8Kavram kanıtıEPSS %3joomsky · js jobs17 Şub 2018
- CVE-2025-3088640Planlayın
WordPress JS Help Desk plugin <= 2.9.2 - SQL Injection vulnerability
KritikCVSS 10,0İstismar yokEPSS %1joomsky · js help desk1 Nis 2025
- CVE-2019-1752739İzleyin
dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.
KritikCVSS 9,8İstismar yokEPSS %1joomsky · js jobs19 Ara 2019
- CVE-2025-3262639İzleyin
WordPress JS Job Manager plugin <= 2.0.2 - SQL Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1joomsky · js job manager17 Nis 2025
- CVE-2025-3266039İzleyin
WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability
KritikCVSS 9,8İstismar yokEPSS %0joomsky · js job manager17 Nis 2025
- CVE-2024-4327439İzleyin
WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability
KritikCVSS 9,8İstismar yokEPSS %0joomsky · js help desk1 Kas 2024
- CVE-2018-600736İzleyin
CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.
YüksekCVSS 8,8Kavram kanıtıEPSS %2joomsky · js support ticket29 Oca 2018
- CVE-2023-2544436İzleyin
WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability
KritikCVSS 9,1İstismar yokEPSS %1joomsky · js help desk17 May 2024
- CVE-2022-4683836İzleyin
WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability
KritikCVSS 9,1İstismar yokEPSS %1joomsky · js help desk13 Ara 2024
- CVE-2025-3087836İzleyin
WordPress JS Help Desk plugin <= 2.9.2 - Arbitrary File Deletion vulnerability
KritikCVSS 9,1İstismar yokEPSS %1joomsky · js help desk1 Nis 2025
- CVE-2025-3214635İzleyin
WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1joomsky · js job manager4 Nis 2025
- CVE-2018-2100235İzleyin
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %1joomsky · js help desk27 Ağu 2019
- CVE-2018-2097435İzleyin
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
YüksekCVSS 8,8İstismar yokEPSS %1joomsky · js job manager16 Ağu 2019
- CVE-2023-3108735İzleyin
WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0joomsky · js job manager9 Kas 2023
- CVE-2022-4715134İzleyin
WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0joomsky · js help desk17 Nis 2024
- CVE-2025-3262732İzleyin
WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1joomsky · js job manager11 Nis 2025
- CVE-2025-3090132İzleyin
WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1joomsky · js help desk1 Nis 2025
- CVE-2025-3088230İzleyin
WordPress JS Help Desk plugin <= 2.9.1 - Arbitrary File Download vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1joomsky · js help desk1 Nis 2025
- CVE-2025-3088030İzleyin
WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0joomsky · js help desk1 Nis 2025
- CVE-2023-2868926İzleyin
WordPress JS Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1joomsky · js job manager9 Ara 2024
- CVE-2018-918322İzleyin
The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
OrtaCVSS 5,4Kavram kanıtıEPSS %2joomsky · js jobs2 Nis 2018
- CVE-2025-2220621İzleyin
Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for Joomla
OrtaCVSS 4,7İstismar yokEPSS %9joomsky · js jobs4 Şub 2025
- CVE-2022-4684021İzleyin
WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control
OrtaCVSS 5,4İstismar yokEPSS %0joomsky · js help desk13 Ara 2024
- CVE-2025-3186721İzleyin
WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0joomsky · js job manager1 Nis 2025