İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2019: sömürülen ve yeni ciddi CVE kayıtları

87 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2019-12569
    36İzleyin

    A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system.

    YüksekCVSS 7,8İstismar yokEPSS %15

    rakuten · viber2 Haz 2019

  • CVE-2019-11580
    98Hemen

    Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    atlassian · crowd3 Haz 2019

  • CVE-2019-12593
    42Planlayın

    IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c dir

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    icewarp · mail server3 Haz 2019

  • CVE-2018-5406
    39İzleyin

    The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    quest · kace systems management appliance firmware3 Haz 2019

  • CVE-2019-6753
    25İzleyin

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.3.0.10826.

    OrtaCVSS 5,5İstismar yokEPSS %10

    foxitsoftware · foxit reader3 Haz 2019

  • CVE-2019-12169
    57Planlayın

    ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive t

    YüksekCVSS 8,8SilahlaştırılmışEPSS %72

    atutor · atutor3 Haz 2019

  • CVE-2019-10009
    29İzleyin

    A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505.

    OrtaCVSS 6,5Kavram kanıtıEPSS %11

    southrivertech · titan ftp server3 Haz 2019

  • CVE-2019-10883
    59Planlayın

    Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.

    KritikCVSS 9,8İstismar yokEPSS %65

    citrix · citrix sd-wan center3 Haz 2019

  • CVE-2018-13379
    99Hemen

    An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    fortinet · fortiproxy4 Haz 2019

  • CVE-2018-13380
    43Planlayın

    A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet F

    OrtaCVSS 6,1Kavram kanıtıEPSS %62

    fortinet · fortios4 Haz 2019

  • CVE-2018-13382
    85Hemen

    An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 t

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %81

    fortinet · fortiproxy4 Haz 2019

  • CVE-2019-12616
    32İzleyin

    An issue was discovered in phpMyAdmin before 4.9.0.

    OrtaCVSS 6,5Kavram kanıtıEPSS %20

    phpmyadmin · phpmyadmin5 Haz 2019

  • CVE-2019-10149
    99Hemen

    A flaw was found in Exim versions 4.87 to 4.91 (inclusive).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    exim · exim5 Haz 2019

  • CVE-2019-12735
    40Planlayın

    getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command i

    YüksekCVSS 8,6Kavram kanıtıEPSS %18

    vim · vim5 Haz 2019

  • CVE-2018-7123
    47Planlayın

    A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

    YüksekCVSS 7,5İstismar yokEPSS %57

    hp · intelligent management center5 Haz 2019

  • CVE-2019-11944
    43Planlayın

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

    KritikCVSS 9,8İstismar yokEPSS %13

    hp · intelligent management center5 Haz 2019

  • CVE-2019-11945
    63Bu hafta

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

    KritikCVSS 9,8İstismar yokEPSS %78

    hp · intelligent management center5 Haz 2019

  • CVE-2019-5355
    46Planlayın

    A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

    YüksekCVSS 7,5İstismar yokEPSS %53

    hp · intelligent management center5 Haz 2019

  • CVE-2019-5356
    42Planlayın

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

    KritikCVSS 9,8İstismar yokEPSS %10

    hp · intelligent management center5 Haz 2019

  • CVE-2019-12196
    60Bu hafta

    A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to

    KritikCVSS 9,8İstismar yokEPSS %69

    zohocorp · manageengine netflow analyzer5 Haz 2019

  • CVE-2019-12276
    47Planlayın

    A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthentic

    YüksekCVSS 7,5Kavram kanıtıEPSS %57

    grandnode · grandnode5 Haz 2019

  • CVE-2019-9189
    38İzleyin

    Prima Systems FlexAir, Versions 2.4.9api3 and prior.

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    primasystems · flexair5 Haz 2019

  • CVE-2019-8385
    45Planlayın

    An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    thomsonreuters · concourse matter room5 Haz 2019

  • CVE-2019-11080
    39İzleyin

    Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    sitecore · experience platform6 Haz 2019

  • CVE-2019-6989
    38İzleyin

    TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    tp-link · tl-wr940n firmware6 Haz 2019

  • CVE-2019-12477
    26İzleyin

    Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without

    OrtaCVSS 5,5SilahlaştırılmışEPSS %13

    supra · stv-lc40lt0020f firmware7 Haz 2019

  • CVE-2018-20523
    24İzleyin

    Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection.

    OrtaCVSS 5,3Kavram kanıtıEPSS %10

    mi · stock browser7 Haz 2019

  • CVE-2018-10700
    35İzleyin

    An issue was discovered on Moxa AWK-3121 1.19 devices.

    OrtaCVSS 6,1İstismar yokEPSS %38

    moxa · awk-3121 firmware7 Haz 2019

  • CVE-2019-3955
    35İzleyin

    Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly vali

    YüksekCVSS 7,5İstismar yokEPSS %17

    dameware · remote mini control7 Haz 2019

  • CVE-2019-3957
    37İzleyin

    Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly

    YüksekCVSS 7,4İstismar yokEPSS %25

    solarwinds · dameware mini remote control7 Haz 2019

  • CVE-2019-12780
    60Bu hafta

    The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    belkin · crock-pot smart slow cooker with wemo firmware10 Haz 2019

  • CVE-2019-9879
    53Planlayın

    The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registratio

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    wpengine · wpgraphql10 Haz 2019

  • CVE-2019-9880
    47Planlayın

    An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress.

    KritikCVSS 9,1Kavram kanıtıEPSS %35

    wpengine · wpgraphql10 Haz 2019

  • CVE-2019-9881
    27İzleyin

    The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even wh

    OrtaCVSS 5,3Kavram kanıtıEPSS %18

    wpengine · wpgraphql10 Haz 2019

  • CVE-2019-12765
    42Planlayın

    An issue was discovered in Joomla! before 3.9.7.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    joomla · joomla\!11 Haz 2019

  • CVE-2009-5156
    42Planlayın

    An issue was discovered on ASMAX AR-804gu 66.34.1 devices.

    KritikCVSS 9,8İstismar yokEPSS %10

    veracomp · asmax ar-804gu firmware11 Haz 2019

  • CVE-2010-5330
    81Hemen

    On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %40

    ui · airos11 Haz 2019

  • CVE-2013-7471
    46Planlayın

    An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11,

    KritikCVSS 9,8İstismar yokEPSS %23

    dlink · dir-300 firmware11 Haz 2019

  • CVE-2018-20841
    53Planlayın

    HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacter

    KritikCVSS 9,8İstismar yokEPSS %47

    hootoo · tripmate titan ht-tm05 firmware11 Haz 2019

  • CVE-2019-0220
    26İzleyin

    A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38.

    OrtaCVSS 5,3İstismar yokEPSS %18

    apache · http server11 Haz 2019

  • CVE-2019-0196
    27İzleyin

    A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38.

    OrtaCVSS 5,3İstismar yokEPSS %19

    apache · http server11 Haz 2019

  • CVE-2019-0888
    38İzleyin

    ActiveX Data Objects (ADO) Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    microsoft · windows 1012 Haz 2019

  • CVE-2019-0948
    22İzleyin

    Windows Event Viewer Information Disclosure Vulnerability

    OrtaCVSS 4,7Kavram kanıtıEPSS %12

    microsoft · windows 1012 Haz 2019

  • CVE-2019-1009
    33İzleyin

    Windows GDI Information Disclosure Vulnerability

    OrtaCVSS 4,7İstismar yokEPSS %48

    microsoft · windows 712 Haz 2019

  • CVE-2019-1019
    39İzleyin

    Microsoft Windows Security Feature Bypass Vulnerability

    YüksekCVSS 8,5Kavram kanıtıEPSS %15

    microsoft · windows 1012 Haz 2019

  • CVE-2019-1040
    35İzleyin

    Windows NTLM Tampering Vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %48

    microsoft · windows 1012 Haz 2019

  • CVE-2019-1064
    63Bu hafta

    Windows Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %6

    microsoft · windows 10 160712 Haz 2019

  • CVE-2019-1069
    63Bu hafta

    Task Scheduler Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %6

    microsoft · windows 10 150712 Haz 2019

  • CVE-2019-0307
    10İzleyin

    Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communicat

    DüşükCVSS 2,4SilahlaştırılmışEPSS %2

    sap · solution manager12 Haz 2019

  • CVE-2019-7838
    44Planlayın

    ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerabil

    KritikCVSS 9,8İstismar yokEPSS %17

    adobe · coldfusion12 Haz 2019

  • CVE-2019-7839
    52Planlayın

    ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    adobe · coldfusion12 Haz 2019

  • CVE-2019-7840
    44Planlayın

    ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerab

    KritikCVSS 9,8İstismar yokEPSS %17

    adobe · coldfusion12 Haz 2019

  • CVE-2019-12799
    51Planlayın

    In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, w

    YüksekCVSS 8,8SilahlaştırılmışEPSS %54

    shopware · shopware13 Haz 2019

  • CVE-2019-12828
    39İzleyin

    An issue was discovered in Electronic Arts Origin before 10.5.39.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    ea · origin14 Haz 2019

  • CVE-2019-12840
    58Planlayın

    In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root privileges via the dat

    YüksekCVSS 8,8SilahlaştırılmışEPSS %77

    webmin · webmin15 Haz 2019

  • CVE-2018-20469
    45Planlayın

    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    sahipro · sahi pro17 Haz 2019

  • CVE-2018-20470
    44Planlayın

    An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    sahipro · sahi pro17 Haz 2019

  • CVE-2019-12181
    55Planlayın

    A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %65

    solarwinds · serv-u ftp server17 Haz 2019

  • CVE-2019-11409
    61Bu hafta

    app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of

    YüksekCVSS 8,8SilahlaştırılmışEPSS %87

    fusionpbx · fusionpbx17 Haz 2019

  • CVE-2019-7315
    33İzleyin

    Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interfac

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    genieaccess · wip3bvaf firmware17 Haz 2019

  • CVE-2018-18852
    54Planlayın

    Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature

    YüksekCVSS 8,8Kavram kanıtıEPSS %63

    cerio · dt-300n firmware18 Haz 2019

  • CVE-2019-11477
    60Bu hafta

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    YüksekCVSS 7,5Kavram kanıtıEPSS %98

    linux · linux kernel18 Haz 2019

  • CVE-2019-11478
    58Planlayın

    SACK can cause extensive memory use via fragmented resend queue

    YüksekCVSS 7,5İstismar yokEPSS %94

    linux · linux kernel18 Haz 2019

  • CVE-2019-11479
    57Planlayın

    Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.

    YüksekCVSS 7,5İstismar yokEPSS %91

    linux · linux kernel18 Haz 2019

  • CVE-2019-12814
    26İzleyin

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9.

    OrtaCVSS 5,9Kavram kanıtıEPSS %10

    fasterxml · jackson-databind19 Haz 2019

  • CVE-2019-6971
    43Planlayın

    An issue was discovered on TP-Link TL-WR1043ND V2 devices.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    tp-link · tl-wr1043nd firmware19 Haz 2019

  • CVE-2018-18472
    48Planlayın

    Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in

    KritikCVSS 9,8İstismar yokEPSS %30

    westerndigital · my book live firmware19 Haz 2019

  • CVE-2019-2729
    66Bu hafta

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

    KritikCVSS 9,8Kavram kanıtıEPSS %88

    oracle · communications diameter signaling router19 Haz 2019

  • CVE-2019-1898
    33İzleyin

    Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %41

    cisco · rv110w firmware19 Haz 2019

  • CVE-2018-16119
    38İzleyin

    Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code v

    YüksekCVSS 7,2Kavram kanıtıEPSS %33

    tp-link · tl-wr1043nd firmware20 Haz 2019

  • CVE-2018-16117
    48Planlayın

    A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attacker

    YüksekCVSS 8,8İstismar yokEPSS %43

    sophos · sfos20 Haz 2019

  • CVE-2019-12744
    33İzleyin

    SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability tha

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    seeddms · seeddms20 Haz 2019

  • CVE-2019-10072
    52Planlayın

    The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1

    YüksekCVSS 7,5İstismar yokEPSS %72

    apache · tomcat21 Haz 2019

  • CVE-2019-12928
    46Planlayın

    The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve

    KritikCVSS 9,8SilahlaştırılmışEPSS %23

    qemu · qemu24 Haz 2019

  • CVE-2019-7232
    51Planlayın

    The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request.

    YüksekCVSS 8,8İstismar yokEPSS %52

    abb · pb610 panel builder 600 firmware24 Haz 2019

  • CVE-2019-12384
    37İzleyin

    FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-

    OrtaCVSS 5,9Kavram kanıtıEPSS %45

    fasterxml · jackson-databind24 Haz 2019

  • CVE-2019-1619
    64Bu hafta

    Cisco Data Center Network Manager Authentication Bypass Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    cisco · data center network manager26 Haz 2019

  • CVE-2019-1620
    64Bu hafta

    Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %83

    cisco · data center network manager26 Haz 2019

  • CVE-2019-1621
    39İzleyin

    Cisco Data Center Network Manager Arbitrary File Download Vulnerability

    YüksekCVSS 7,5SilahlaştırılmışEPSS %29

    cisco · data center network manager26 Haz 2019

  • CVE-2019-1622
    45Planlayın

    Cisco Data Center Network Manager Information Disclosure Vulnerability

    OrtaCVSS 5,3SilahlaştırılmışEPSS %78

    cisco · data center network manager26 Haz 2019

  • CVE-2019-12583
    49Planlayın

    Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest

    KritikCVSS 9,1Kavram kanıtıEPSS %43

    zyxel · uag2100 firmware27 Haz 2019

  • CVE-2019-5786
    74Bu hafta

    Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %61

    google · chrome27 Haz 2019

  • CVE-2018-14916
    41Planlayın

    LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.

    KritikCVSS 9,1Kavram kanıtıEPSS %17

    loytec · lgate-902 firmware28 Haz 2019

  • CVE-2018-14918
    36İzleyin

    LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    loytec · lgate-902 firmware28 Haz 2019

  • CVE-2019-10993
    42Planlayın

    In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute a

    KritikCVSS 9,8İstismar yokEPSS %10

    advantech · webaccess28 Haz 2019

  • CVE-2019-13068
    37İzleyin

    public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).

    OrtaCVSS 5,4Kavram kanıtıEPSS %51

    grafana · grafana29 Haz 2019

  • CVE-2019-13086
    49Planlayın

    core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    cszcms · csz cms30 Haz 2019