talkback kayıtları
talkback üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-502 Deserialization of Untrusted Data1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-48033İstismar yok | WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerabilitybaptiste.gourdin · talkback · CWE-502 | Kritik9,8 | — | %0,6 | 11 Eki 2024 |
31İzleyin | CVE-2008-3371Kavram kanıtı | Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to inclutalkback · talkback · CWE-22 | Yüksek7,5 | — | %3,5 | 30 Tem 2008 |
31İzleyin | CVE-2008-4346Kavram kanıtı | Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .talkback · talkback · CWE-22 | Yüksek7,5 | — | %2,8 | 30 Eyl 2008 |
29İzleyin | CVE-2007-6105Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (talkback · talkback · CWE-94 | Orta6,8 | — | %6,7 | 23 Kas 2007 |
21İzleyin | CVE-2008-4115Kavram kanıtı | TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfotalkback · talkback · CWE-200 | Orta5,0 | — | %2,6 | 16 Eyl 2008 |
- CVE-2024-4803339İzleyin
WordPress Talkback plugin <= 1.0 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %1baptiste.gourdin · talkback11 Eki 2024
- CVE-2008-337131İzleyin
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to inclu
YüksekCVSS 7,5Kavram kanıtıEPSS %4talkback · talkback30 Tem 2008
- CVE-2008-434631İzleyin
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .
YüksekCVSS 7,5Kavram kanıtıEPSS %3talkback · talkback30 Eyl 2008
- CVE-2007-610529İzleyin
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (
OrtaCVSS 6,8Kavram kanıtıEPSS %7talkback · talkback23 Kas 2007
- CVE-2008-411521İzleyin
TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo
OrtaCVSS 5,0Kavram kanıtıEPSS %3talkback · talkback16 Eyl 2008