Записи Zeeways
13 опубликованных записей вендора zeeways.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 3
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-287 Improper Authentication2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
13 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
35Наблюдать | CVE-2019-25636Эксплойта нет | Zeeways Jobsite CMS Lastest SQL Injection via id Parameterzeeways · jobsite cms · CWE-89 | Высокая8,8 | — | 0,3 % | 24 мар. 2026 г. |
35Наблюдать | CVE-2019-25635Эксплойта нет | Zeeways Matrimony CMS Lastest SQL Injection via profile_listzeeways · matrimony cms · CWE-89 | Высокая8,8 | — | 0,3 % | 24 мар. 2026 г. |
32Наблюдать | CVE-2008-6912Proof of concept | Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/hozeeways · shaadiclone · CWE-287 | Высокая7,5 | — | 7,4 % | 7 авг. 2009 г. |
31Наблюдать | CVE-2008-5042Proof of concept | Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct requeszeeways · photovideotube · CWE-287 | Высокая7,5 | — | 3,3 % | 12 нояб. 2008 г. |
30Наблюдать | CVE-2008-3706Proof of concept | SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid parazeeways · zeejobsite · CWE-89 | Высокая7,5 | — | 1,0 % | 19 авг. 2008 г. |
30Наблюдать | CVE-2008-4717Proof of concept | SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid paramzeeways · zeelyrics · CWE-89 | Высокая7,5 | — | 1,0 % | 23 окт. 2008 г. |
30Наблюдать | CVE-2008-5782Proof of concept | SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid paramezeeways · zeematri · CWE-89 | Высокая7,5 | — | 1,0 % | 31 дек. 2008 г. |
27Наблюдать | CVE-2008-6913Proof of concept | Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitrazeeways · zeejobsite · CWE-20 | Средняя6,5 | — | 3,3 % | 7 авг. 2009 г. |
27Наблюдать | CVE-2008-6914Proof of concept | Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary zeeways · zeeproperty · CWE-264 | Средняя6,5 | — | 3,1 % | 7 авг. 2009 г. |
18Наблюдать | CVE-2010-2144Proof of concept | Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary zeeways · ebay clone auction script · CWE-79 | Средняя4,3 | — | 3,4 % | 3 июн. 2010 г. |
17Наблюдать | CVE-2008-6915Proof of concept | Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary webzeeways · zeeproperty · CWE-79 | Средняя4,3 | — | 1,5 % | 7 авг. 2009 г. |
17Наблюдать | CVE-2009-4601Proof of concept | Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary webzeeways · zeejobsite · CWE-79 | Средняя4,3 | — | 1,5 % | 12 янв. 2010 г. |
17Наблюдать | CVE-2009-4316Эксплойта нет | Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script orzeeways · zeelyrics · CWE-79 | Средняя4,3 | — | 0,9 % | 14 дек. 2009 г. |
- CVE-2019-2563635Наблюдать
Zeeways Jobsite CMS Lastest SQL Injection via id Parameter
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %zeeways · jobsite cms24 мар. 2026 г.
- CVE-2019-2563535Наблюдать
Zeeways Matrimony CMS Lastest SQL Injection via profile_list
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %zeeways · matrimony cms24 мар. 2026 г.
- CVE-2008-691232Наблюдать
Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/ho
ВысокаяCVSS 7,5Proof of conceptEPSS 7 %zeeways · shaadiclone7 авг. 2009 г.
- CVE-2008-504231Наблюдать
Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct reques
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %zeeways · photovideotube12 нояб. 2008 г.
- CVE-2008-370630Наблюдать
SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL commands via the adid para
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %zeeways · zeejobsite19 авг. 2008 г.
- CVE-2008-471730Наблюдать
SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid param
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %zeeways · zeelyrics23 окт. 2008 г.
- CVE-2008-578230Наблюдать
SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands via the adid parame
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %zeeways · zeematri31 дек. 2008 г.
- CVE-2008-691327Наблюдать
Unrestricted file upload vulnerability in editresume_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitra
СредняяCVSS 6,5Proof of conceptEPSS 3 %zeeways · zeejobsite7 авг. 2009 г.
- CVE-2008-691427Наблюдать
Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary
СредняяCVSS 6,5Proof of conceptEPSS 3 %zeeways · zeeproperty7 авг. 2009 г.
- CVE-2010-214418Наблюдать
Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary
СредняяCVSS 4,3Proof of conceptEPSS 3 %zeeways · ebay clone auction script3 июн. 2010 г.
- CVE-2008-691517Наблюдать
Cross-site scripting (XSS) vulnerability in view_prop_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web
СредняяCVSS 4,3Proof of conceptEPSS 2 %zeeways · zeeproperty7 авг. 2009 г.
- CVE-2009-460117Наблюдать
Cross-site scripting (XSS) vulnerability in basic_search_result.php in Zeeways ZeeJobsite 3x allows remote attackers to inject arbitrary web
СредняяCVSS 4,3Proof of conceptEPSS 1 %zeeways · zeejobsite12 янв. 2010 г.
- CVE-2009-431617Наблюдать
Cross-site scripting (XSS) vulnerability in searchresults_main.php in ZeeLyrics 3x allows remote attackers to inject arbitrary web script or
СредняяCVSS 4,3Эксплойта нетEPSS 1 %zeeways · zeelyrics14 дек. 2009 г.