readydesk kayıtları
readydesk üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2016-5050İstismar yok | Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploadingreadydesk · readydesk · CWE-434 | Kritik9,8 | — | %2,8 | 26 Ağu 2016 |
40Planlayın | CVE-2016-5048İstismar yok | SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the usreadydesk · readydesk · CWE-89 | Kritik9,8 | — | %1,9 | 26 Ağu 2016 |
31İzleyin | CVE-2016-5049İstismar yok | Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a ..readydesk · readydesk · CWE-22 | Yüksek7,5 | — | %2,4 | 26 Ağu 2016 |
31İzleyin | CVE-2016-5683İstismar yok | ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with readydesk · readydesk | Yüksek7,8 | — | %0,3 | 26 Ağu 2016 |
- CVE-2016-505040Planlayın
Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading
KritikCVSS 9,8İstismar yokEPSS %3readydesk · readydesk26 Ağu 2016
- CVE-2016-504840Planlayın
SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the us
KritikCVSS 9,8İstismar yokEPSS %2readydesk · readydesk26 Ağu 2016
- CVE-2016-504931İzleyin
Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a ..
YüksekCVSS 7,5İstismar yokEPSS %2readydesk · readydesk26 Ağu 2016
- CVE-2016-568331İzleyin
ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx file and decrypting data with
YüksekCVSS 7,8İstismar yokEPSS %0readydesk · readydesk26 Ağu 2016