Записи chatelao
8 опубликованных записей вендора chatelao.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEПрофиль атаки
Все записи
8 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2013-0135Proof of concept | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parametchatelao · php address book · CWE-89 | Высокая7,5 | — | 2,9 % | 8 апр. 2013 г. |
30Наблюдать | CVE-2012-1911Proof of concept | Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via tchatelao · php address book · CWE-89 | Высокая7,5 | — | 1,2 % | 9 сент. 2012 г. |
30Наблюдать | CVE-2013-1748Proof of concept | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified pachatelao · php address book · CWE-89 | Высокая7,5 | — | 1,0 % | 18 апр. 2013 г. |
30Наблюдать | CVE-2013-2778Эксплойта нет | Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers tochatelao · php address book · CWE-352 | Высокая7,5 | — | 0,6 % | 8 апр. 2013 г. |
27Наблюдать | CVE-2009-2608Proof of concept | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parchatelao · php address book · CWE-89 | Средняя6,8 | — | 0,9 % | 27 июл. 2009 г. |
18Наблюдать | CVE-2012-1912Proof of concept | Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary chatelao · php address book · CWE-79 | Средняя4,3 | — | 2,3 % | 9 сент. 2012 г. |
18Наблюдать | CVE-2012-2903Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web scripchatelao · php address book · CWE-79 | Средняя4,3 | — | 1,7 % | 21 мая 2012 г. |
17Наблюдать | CVE-2013-1749Эксплойта нет | Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary webchatelao · php address book · CWE-79 | Средняя4,3 | — | 0,9 % | 18 апр. 2013 г. |
- CVE-2013-013531Наблюдать
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id paramet
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %chatelao · php address book8 апр. 2013 г.
- CVE-2012-191130Наблюдать
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via t
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %chatelao · php address book9 сент. 2012 г.
- CVE-2013-174830Наблюдать
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified pa
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %chatelao · php address book18 апр. 2013 г.
- CVE-2013-277830Наблюдать
Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %chatelao · php address book8 апр. 2013 г.
- CVE-2009-260827Наблюдать
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id par
СредняяCVSS 6,8Proof of conceptEPSS 0 %chatelao · php address book27 июл. 2009 г.
- CVE-2012-191218Наблюдать
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary
СредняяCVSS 4,3Proof of conceptEPSS 2 %chatelao · php address book9 сент. 2012 г.
- CVE-2012-290318Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web scrip
СредняяCVSS 4,3Proof of conceptEPSS 1 %chatelao · php address book21 мая 2012 г.
- CVE-2013-174917Наблюдать
Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web
СредняяCVSS 4,3Эксплойта нетEPSS 0 %chatelao · php address book18 апр. 2013 г.