Записи john lim
8 опубликованных записей вендора john lim.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 75 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
8 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
34Наблюдать | CVE-2006-0146Proof of concept | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Camantis · mantis · CWE-89 | Высокая7,5 | — | 13,2 % | 9 янв. 2006 г. |
34Наблюдать | CVE-2006-0147Proof of concept | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (john lim · adodb | Высокая7,5 | — | 13,0 % | 9 янв. 2006 г. |
21Наблюдать | CVE-2006-0410Эксплойта нет | SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspejohn lim · adodb | Средняя5,0 | — | 2,9 % | 24 янв. 2006 г. |
21Наблюдать | CVE-2006-4618Эксплойта нет | PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-linjohn lim · adodb | Средняя5,1 | — | 1,7 % | 6 сент. 2006 г. |
20Наблюдать | CVE-2006-4976Эксплойта нет | The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) servjohn lim · adodb date library | Средняя5,0 | — | 1,4 % | 24 сент. 2006 г. |
20Наблюдать | CVE-2011-3699Эксплойта нет | John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveajohn lim · adodb · CWE-200 | Средняя5,0 | — | 1,3 % | 23 сент. 2011 г. |
20Наблюдать | CVE-2004-2664Эксплойта нет | John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts thjohn lim · adodb | Средняя5,0 | — | 1,1 % | 31 дек. 2004 г. |
19Наблюдать | CVE-2006-0806Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to injohn lim · adodb · CWE-79 | Средняя4,3 | — | 6,0 % | 20 февр. 2006 г. |
- CVE-2006-014634Наблюдать
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %mantis · mantis9 янв. 2006 г.
- CVE-2006-014734Наблюдать
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %john lim · adodb9 янв. 2006 г.
- CVE-2006-041021Наблюдать
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspe
СредняяCVSS 5,0Эксплойта нетEPSS 2 %john lim · adodb24 янв. 2006 г.
- CVE-2006-461821Наблюдать
PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-lin
СредняяCVSS 5,1Эксплойта нетEPSS 1 %john lim · adodb6 сент. 2006 г.
- CVE-2006-497620Наблюдать
The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) serv
СредняяCVSS 5,0Эксплойта нетEPSS 1 %john lim · adodb date library24 сент. 2006 г.
- CVE-2011-369920Наблюдать
John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea
СредняяCVSS 5,0Эксплойта нетEPSS 1 %john lim · adodb23 сент. 2011 г.
- CVE-2004-266420Наблюдать
John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts th
СредняяCVSS 5,0Эксплойта нетEPSS 1 %john lim · adodb31 дек. 2004 г.
- CVE-2006-080619Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to in
СредняяCVSS 4,3Proof of conceptEPSS 6 %john lim · adodb20 февр. 2006 г.