Skip to content
Noroxi

denkgroot records

6 published records for vendor denkgroot.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2024-41603
    38Monitor

    Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.

    CriticalCVSS 9.6No exploitEPSS 0%

    denkgroot · spinaJul 19, 2024

  • CVE-2015-4619
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.

    HighCVSS 8.8No exploitEPSS 0%

    denkgroot · spinaSep 7, 2017

  • CVE-2024-41602
    35Monitor

    Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL

    HighCVSS 8.8No exploitEPSS 0%

    denkgroot · spinaJul 19, 2024

  • CVE-2024-7106
    27Monitor

    Spina CMS media_folders cross-site request forgery

    MediumCVSS 6.9No exploitEPSS 0%

    denkgroot · spinaJul 25, 2024

  • CVE-2024-7065
    27Monitor

    Spina CMS cross-site request forgery

    MediumCVSS 6.9No exploitEPSS 0%

    denkgroot · spinaJul 24, 2024

  • CVE-2023-3445
    19Monitor

    Cross-site Scripting (XSS) - Stored in spinacms/spina

    MediumCVSS 4.8No exploitEPSS 0%

    denkgroot · spinaJun 28, 2023