Записи viart
13 опубликованных записей вендора viart.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 2
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
13 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2007-5364Эксплойта нет | Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attackviart · shopping cart · CWE-22 | Критическая10,0 | — | 2,3 % | 10 окт. 2007 г. |
31Наблюдать | CVE-2008-3369Proof of concept | SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via viart · viart shop · CWE-89 | Высокая7,5 | — | 1,7 % | 30 июл. 2008 г. |
29Наблюдать | CVE-2007-6347Proof of concept | PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, viart · cms · CWE-94 | Средняя6,8 | — | 7,0 % | 13 дек. 2007 г. |
27Наблюдать | CVE-2008-6758Proof of concept | Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack theviart · viart shop · CWE-352 | Средняя6,8 | — | 0,9 % | 28 апр. 2009 г. |
21Наблюдать | CVE-2008-6765Proof of concept | ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parviart · viart shop | Средняя5,0 | — | 2,4 % | 28 апр. 2009 г. |
20Наблюдать | CVE-2008-6766Эксплойта нет | cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flviart · viart shop | Средняя5,0 | — | 1,3 % | 28 апр. 2009 г. |
20Наблюдать | CVE-2007-5463Эксплойта нет | ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for cerviart · shop · CWE-22 | Средняя5,0 | — | 0,9 % | 15 окт. 2007 г. |
18Наблюдать | CVE-2009-4548Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via viart · viart helpdesk · CWE-79 | Средняя4,3 | — | 2,2 % | 4 янв. 2010 г. |
18Наблюдать | CVE-2009-4547Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (viart · viart cms · CWE-79 | Средняя4,3 | — | 1,8 % | 4 янв. 2010 г. |
18Наблюдать | CVE-2008-6760Эксплойта нет | ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a viart · viart shop · CWE-59 | Средняя4,3 | — | 1,7 % | 28 апр. 2009 г. |
17Наблюдать | CVE-2008-6757Proof of concept | Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitviart · viart shop · CWE-79 | Средняя4,3 | — | 1,5 % | 28 апр. 2009 г. |
17Наблюдать | CVE-2008-6759Эксплойта нет | ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_sviart · viart shop · CWE-59 | Средняя4,3 | — | 1,3 % | 28 апр. 2009 г. |
11Наблюдать | CVE-2006-2979Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, anviart · shop | Низкая2,6 | — | 2,0 % | 12 июн. 2006 г. |
- CVE-2007-536441В плане
Directory traversal vulnerability in payments/ideal_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attack
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %viart · shopping cart10 окт. 2007 г.
- CVE-2008-336931Наблюдать
SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %viart · viart shop30 июл. 2008 г.
- CVE-2007-634729Наблюдать
PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2,
СредняяCVSS 6,8Proof of conceptEPSS 7 %viart · cms13 дек. 2007 г.
- CVE-2008-675827Наблюдать
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the
СредняяCVSS 6,8Proof of conceptEPSS 0 %viart · viart shop28 апр. 2009 г.
- CVE-2008-676521Наблюдать
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name par
СредняяCVSS 5,0Proof of conceptEPSS 2 %viart · viart shop28 апр. 2009 г.
- CVE-2008-676620Наблюдать
cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a fl
СредняяCVSS 5,0Эксплойта нетEPSS 1 %viart · viart shop28 апр. 2009 г.
- CVE-2007-546320Наблюдать
ideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow remote attackers to obtain the pathname for cer
СредняяCVSS 5,0Эксплойта нетEPSS 0 %viart · shop15 окт. 2007 г.
- CVE-2009-454818Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via
СредняяCVSS 4,3Proof of conceptEPSS 2 %viart · viart helpdesk4 янв. 2010 г.
- CVE-2009-454718Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the (
СредняяCVSS 4,3Proof of conceptEPSS 1 %viart · viart cms4 янв. 2010 г.
- CVE-2008-676018Наблюдать
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a
СредняяCVSS 4,3Эксплойта нетEPSS 1 %viart · viart shop28 апр. 2009 г.
- CVE-2008-675717Наблюдать
Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbit
СредняяCVSS 4,3Proof of conceptEPSS 1 %viart · viart shop28 апр. 2009 г.
- CVE-2008-675917Наблюдать
ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_s
СредняяCVSS 4,3Эксплойта нетEPSS 1 %viart · viart shop28 апр. 2009 г.
- CVE-2006-297911Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, an
НизкаяCVSS 2,6Эксплойта нетEPSS 2 %viart · shop12 июн. 2006 г.