kindsoft kayıtları
kindsoft üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2021-42228İstismar yok | A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.kindsoft · kindeditor · CWE-352 | Yüksek8,8 | — | %1,0 | 14 Eki 2021 |
25İzleyin | CVE-2019-7543Kavram kanıtı | In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.kindsoft · kindeditor · CWE-79 | Orta6,1 | — | %3,2 | 6 Şub 2019 |
24İzleyin | CVE-2021-42227İstismar yok | Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .htmlkindsoft · kindeditor · CWE-79 | Orta6,1 | — | %0,9 | 14 Eki 2021 |
24İzleyin | CVE-2021-30086İstismar yok | Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain usekindsoft · kindeditor · CWE-79 | Orta6,1 | — | %0,7 | 28 Eyl 2021 |
24İzleyin | CVE-2021-37267İstismar yok | Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie ikindsoft · kindeditor · CWE-79 | Orta6,1 | — | %0,6 | 28 Eyl 2021 |
24İzleyin | CVE-2020-28717İstismar yok | Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to executkindsoft · kindeditor · CWE-79 | Orta6,1 | — | %0,5 | 11 Ağu 2023 |
17İzleyin | CVE-2017-1002024İstismar yok | Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to uplkindsoft · kind editor · CWE-287 | Orta4,3 | — | %1,3 | 14 Eyl 2017 |
- CVE-2021-4222835İzleyin
A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html.
YüksekCVSS 8,8İstismar yokEPSS %1kindsoft · kindeditor14 Eki 2021
- CVE-2019-754325İzleyin
In KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting (XSS) vulnerability.
OrtaCVSS 6,1Kavram kanıtıEPSS %3kindsoft · kindeditor6 Şub 2019
- CVE-2021-4222724İzleyin
Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html
OrtaCVSS 6,1İstismar yokEPSS %1kindsoft · kindeditor14 Eki 2021
- CVE-2021-3008624İzleyin
Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain use
OrtaCVSS 6,1İstismar yokEPSS %1kindsoft · kindeditor28 Eyl 2021
- CVE-2021-3726724İzleyin
Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie i
OrtaCVSS 6,1İstismar yokEPSS %1kindsoft · kindeditor28 Eyl 2021
- CVE-2020-2871724İzleyin
Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execut
OrtaCVSS 6,1İstismar yokEPSS %1kindsoft · kindeditor11 Ağu 2023
- CVE-2017-100202417İzleyin
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upl
OrtaCVSS 4,3İstismar yokEPSS %1kindsoft · kind editor14 Eyl 2017