Записи mooSocial
19 опубликованных записей вендора moosocial.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-15 External Control of System or Configuration Setting1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEПрофиль атаки
Все записи
19 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
35Наблюдать | CVE-2023-40868Proof of concept | Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Dmoosocial · moosocial · CWE-352 | Высокая8,8 | — | 1,3 % | 14 сент. 2023 г. |
35Наблюдать | CVE-2023-44811Proof of concept | Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitivemoosocial · moosocial · CWE-352 | Высокая8,8 | — | 1,0 % | 9 окт. 2023 г. |
27Наблюдать | CVE-2023-4174Proof of concept | mooSocial mooStore cross site scriptingmoosocial · moostore · CWE-79 | Средняя6,1 | — | 9,1 % | 5 авг. 2023 г. |
27Наблюдать | CVE-2023-43323Proof of concept | mooSocial 3.1.8 is vulnerable to external service interaction on post function.moosocial · moosocial · CWE-15 | Средняя6,5 | — | 2,0 % | 28 сент. 2023 г. |
26Наблюдать | CVE-2023-3847Proof of concept | mooSocial mooDating URL users cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3848Proof of concept | mooSocial mooDating URL view cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3849Proof of concept | mooSocial mooDating URL find-a-match cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3846Proof of concept | mooSocial mooDating URL pages cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3845Proof of concept | mooSocial mooDating URL ajax_invite cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3843Proof of concept | mooSocial mooDating URL question cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-3844Proof of concept | mooSocial mooDating URL friends cross site scriptingmoosocial · moodating · CWE-79 | Средняя6,1 | — | 5,9 % | 23 июл. 2023 г. |
26Наблюдать | CVE-2023-4173Proof of concept | mooSocial mooStore index cross site scriptingmoosocial · moostore · CWE-79 | Средняя6,1 | — | 5,4 % | 5 авг. 2023 г. |
25Наблюдать | CVE-2023-43325Proof of concept | A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'moosocial · moosocial · CWE-79 | Средняя6,1 | — | 2,0 % | 25 сент. 2023 г. |
25Наблюдать | CVE-2023-44812Proof of concept | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 | Средняя6,1 | — | 2,0 % | 9 окт. 2023 г. |
25Наблюдать | CVE-2023-44813Proof of concept | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 | Средняя6,1 | — | 1,8 % | 9 окт. 2023 г. |
25Наблюдать | CVE-2023-45542Proof of concept | Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the qmoosocial · moosocial · CWE-79 | Средняя6,1 | — | 1,8 % | 16 окт. 2023 г. |
25Наблюдать | CVE-2023-43326Proof of concept | A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session comoosocial · moosocial · CWE-79 | Средняя6,1 | — | 1,7 % | 25 сент. 2023 г. |
24Наблюдать | CVE-2023-40869Proof of concept | Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a moosocial · moosocial · CWE-79 | Средняя6,1 | — | 1,0 % | 14 сент. 2023 г. |
24Наблюдать | CVE-2023-4175Эксплойта нет | mooSocial mooTravel cross site scriptingmoosocial · mootravel · CWE-79 | Средняя6,1 | — | 0,3 % | 5 авг. 2023 г. |
- CVE-2023-4086835Наблюдать
Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the D
ВысокаяCVSS 8,8Proof of conceptEPSS 1 %moosocial · moosocial14 сент. 2023 г.
- CVE-2023-4481135Наблюдать
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive
ВысокаяCVSS 8,8Proof of conceptEPSS 1 %moosocial · moosocial9 окт. 2023 г.
- CVE-2023-417427Наблюдать
mooSocial mooStore cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 9 %moosocial · moostore5 авг. 2023 г.
- CVE-2023-4332327Наблюдать
mooSocial 3.1.8 is vulnerable to external service interaction on post function.
СредняяCVSS 6,5Proof of conceptEPSS 2 %moosocial · moosocial28 сент. 2023 г.
- CVE-2023-384726Наблюдать
mooSocial mooDating URL users cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384826Наблюдать
mooSocial mooDating URL view cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384926Наблюдать
mooSocial mooDating URL find-a-match cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384626Наблюдать
mooSocial mooDating URL pages cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384526Наблюдать
mooSocial mooDating URL ajax_invite cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384326Наблюдать
mooSocial mooDating URL question cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-384426Наблюдать
mooSocial mooDating URL friends cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moodating23 июл. 2023 г.
- CVE-2023-417326Наблюдать
mooSocial mooStore index cross site scripting
СредняяCVSS 6,1Proof of conceptEPSS 5 %moosocial · moostore5 авг. 2023 г.
- CVE-2023-4332525Наблюдать
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'
СредняяCVSS 6,1Proof of conceptEPSS 2 %moosocial · moosocial25 сент. 2023 г.
- CVE-2023-4481225Наблюдать
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
СредняяCVSS 6,1Proof of conceptEPSS 2 %moosocial · moosocial9 окт. 2023 г.
- CVE-2023-4481325Наблюдать
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
СредняяCVSS 6,1Proof of conceptEPSS 1 %moosocial · moosocial9 окт. 2023 г.
- CVE-2023-4554225Наблюдать
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q
СредняяCVSS 6,1Proof of conceptEPSS 1 %moosocial · moosocial16 окт. 2023 г.
- CVE-2023-4332625Наблюдать
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session co
СредняяCVSS 6,1Proof of conceptEPSS 1 %moosocial · moosocial25 сент. 2023 г.
- CVE-2023-4086924Наблюдать
Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a
СредняяCVSS 6,1Proof of conceptEPSS 1 %moosocial · moosocial14 сент. 2023 г.
- CVE-2023-417524Наблюдать
mooSocial mooTravel cross site scripting
СредняяCVSS 6,1Эксплойта нетEPSS 0 %moosocial · mootravel5 авг. 2023 г.