sdcms kayıtları
sdcms üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-9651İstismar yok | An issue was discovered in SDCMS V1.7.sdcms · sdcms · CWE-94 | Kritik9,8 | — | %2,6 | 10 Mar 2019 |
36İzleyin | CVE-2018-19520İstismar yok | An issue was discovered in SDCMS 1.6 with PHP 5.x.sdcms · sdcms · CWE-94 | Yüksek8,8 | — | %2,9 | 25 Kas 2018 |
35İzleyin | CVE-2024-50809İstismar yok | The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commandsCWE-78 | Yüksek8,8 | — | %0,7 | 8 Kas 2024 |
35İzleyin | CVE-2019-9652İstismar yok | There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.sdcms · sdcms · CWE-352 | Yüksek8,8 | — | %0,6 | 10 Mar 2019 |
35İzleyin | CVE-2018-11004İstismar yok | An issue was discovered in SDcms v1.5.sdcms · sdcms · CWE-352 | Yüksek8,8 | — | %0,6 | 12 May 2018 |
31İzleyin | CVE-2018-19748İstismar yok | app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&rsdcms · sdcms · CWE-22 | Yüksek7,5 | — | %2,0 | 29 Kas 2018 |
- CVE-2019-965140Planlayın
An issue was discovered in SDCMS V1.7.
KritikCVSS 9,8İstismar yokEPSS %3sdcms · sdcms10 Mar 2019
- CVE-2018-1952036İzleyin
An issue was discovered in SDCMS 1.6 with PHP 5.x.
YüksekCVSS 8,8İstismar yokEPSS %3sdcms · sdcms25 Kas 2018
- CVE-2024-5080935İzleyin
The theme.php file in SDCMS 2.8 has a command execution vulnerability that allows for the execution of system commands
YüksekCVSS 8,8İstismar yokEPSS %18 Kas 2024
- CVE-2019-965235İzleyin
There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.
YüksekCVSS 8,8İstismar yokEPSS %1sdcms · sdcms10 Mar 2019
- CVE-2018-1100435İzleyin
An issue was discovered in SDcms v1.5.
YüksekCVSS 8,8İstismar yokEPSS %1sdcms · sdcms12 May 2018
- CVE-2018-1974831İzleyin
app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&r
YüksekCVSS 7,5İstismar yokEPSS %2sdcms · sdcms29 Kas 2018