geeeeeeeek records
5 published records for vendor geeeeeeeek.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-28100No exploit | A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at tgeeeeeeeek · dingfanzu · CWE-89 | Critical9.8 | — | 0.6% | Apr 15, 2025 |
26Monitor | CVE-2024-50651No exploit | java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs geeeeeeeek · java shop · CWE-639 | Medium6.5 | — | 0.4% | Nov 15, 2024 |
21Monitor | CVE-2024-8302No exploit | dingfanzu CMS chpwd.php sql injectiongeeeeeeeek · dingfanzu · CWE-89 | Medium5.3 | — | 0.7% | Aug 29, 2024 |
17Monitor | CVE-2024-50652No exploit | A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.geeeeeeeek · java shop · CWE-434 | Medium4.3 | — | 0.3% | Nov 15, 2024 |
14Monitor | CVE-2024-48341No exploit | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShopgeeeeeeeek · dingfanzu · CWE-352 | Low3.7 | — | 0.1% | Sep 8, 2025 |
- CVE-2025-2810039Monitor
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at t
CriticalCVSS 9.8No exploitEPSS 0%geeeeeeeek · dingfanzuApr 15, 2025
- CVE-2024-5065126Monitor
java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs
MediumCVSS 6.5No exploitEPSS 0%geeeeeeeek · java shopNov 15, 2024
- CVE-2024-830221Monitor
dingfanzu CMS chpwd.php sql injection
MediumCVSS 5.3No exploitEPSS 0%geeeeeeeek · dingfanzuAug 29, 2024
- CVE-2024-5065217Monitor
A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.
MediumCVSS 4.3No exploitEPSS 0%geeeeeeeek · java shopNov 15, 2024
- CVE-2024-4834114Monitor
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop
LowCVSS 3.7No exploitEPSS 0%geeeeeeeek · dingfanzuSep 8, 2025