Записи glfusion
11 опубликованных записей вендора glfusion.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 2
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-346 Origin Validation Error1
- CWE-287 Improper Authentication1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
11 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2021-44949Эксплойта нет | glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php.glfusion · glfusion · CWE-639 | Критическая9,8 | — | 1,1 % | 14 дек. 2021 г. |
36Наблюдать | CVE-2021-44935Эксплойта нет | glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php.glfusion · glfusion · CWE-346 | Критическая9,1 | — | 0,5 % | 14 дек. 2021 г. |
31Наблюдать | CVE-2009-1282Proof of concept | SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQLglfusion · glfusion · CWE-89 | Высокая7,5 | — | 2,7 % | 9 апр. 2009 г. |
31Наблюдать | CVE-2009-4796Proof of concept | Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and glfusion · glfusion · CWE-89 | Высокая7,5 | — | 2,3 % | 22 апр. 2010 г. |
27Наблюдать | CVE-2009-1283Proof of concept | glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gaiglfusion · glfusion · CWE-310 | Средняя6,8 | — | 1,2 % | 9 апр. 2009 г. |
24Наблюдать | CVE-2021-45843Эксплойта нет | glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability.glfusion · glfusion · CWE-79 | Средняя6,1 | — | 0,6 % | 28 сент. 2022 г. |
21Наблюдать | CVE-2021-44937Эксплойта нет | glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php.glfusion · glfusion · CWE-287 | Средняя5,3 | — | 0,7 % | 14 дек. 2021 г. |
18Наблюдать | CVE-2013-1466Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTglfusion · glfusion · CWE-79 | Средняя4,3 | — | 3,7 % | 5 февр. 2014 г. |
17Наблюдать | CVE-2009-1281Proof of concept | Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspeciglfusion · glfusion · CWE-79 | Средняя4,3 | — | 1,4 % | 9 апр. 2009 г. |
17Наблюдать | CVE-2021-44942Эксплойта нет | glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.phglfusion · glfusion · CWE-352 | Средняя4,3 | — | 0,3 % | 14 дек. 2021 г. |
10Наблюдать | CVE-2009-0455Proof of concept | Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versionsglfusion · glfusion · CWE-79 | Низкая2,6 | — | 1,6 % | 10 февр. 2009 г. |
- CVE-2021-4494939Наблюдать
glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %glfusion · glfusion14 дек. 2021 г.
- CVE-2021-4493536Наблюдать
glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php.
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %glfusion · glfusion14 дек. 2021 г.
- CVE-2009-128231Наблюдать
SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %glfusion · glfusion9 апр. 2009 г.
- CVE-2009-479631Наблюдать
Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in glFusion 1.1.2 and
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %glfusion · glfusion22 апр. 2010 г.
- CVE-2009-128327Наблюдать
glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gai
СредняяCVSS 6,8Proof of conceptEPSS 1 %glfusion · glfusion9 апр. 2009 г.
- CVE-2021-4584324Наблюдать
glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability.
СредняяCVSS 6,1Эксплойта нетEPSS 0 %glfusion · glfusion28 сент. 2022 г.
- CVE-2021-4493721Наблюдать
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php.
СредняяCVSS 5,3Эксплойта нетEPSS 0 %glfusion · glfusion14 дек. 2021 г.
- CVE-2013-146618Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HT
СредняяCVSS 4,3Proof of conceptEPSS 3 %glfusion · glfusion5 февр. 2014 г.
- CVE-2009-128117Наблюдать
Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspeci
СредняяCVSS 4,3Proof of conceptEPSS 1 %glfusion · glfusion9 апр. 2009 г.
- CVE-2021-4494217Наблюдать
glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.ph
СредняяCVSS 4,3Эксплойта нетEPSS 0 %glfusion · glfusion14 дек. 2021 г.
- CVE-2009-045510Наблюдать
Cross-site scripting (XSS) vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions
НизкаяCVSS 2,6Proof of conceptEPSS 1 %glfusion · glfusion10 февр. 2009 г.