availscript kayıtları
availscript üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2008-4371Kavram kanıtı | SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the availscript · availscript article script · CWE-89 | Yüksek7,5 | — | %1,0 | 1 Eki 2008 |
30İzleyin | CVE-2008-4369Kavram kanıtı | SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid paravailscript · availscript photo album · CWE-89 | Yüksek7,5 | — | %1,0 | 1 Eki 2008 |
30İzleyin | CVE-2008-4373Kavram kanıtı | SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL comavailscript · availscript jobs portal script · CWE-89 | Yüksek7,5 | — | %1,0 | 1 Eki 2008 |
30İzleyin | CVE-2008-4375Kavram kanıtı | SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands viaavailscript · availscript classmate script · CWE-89 | Yüksek7,5 | — | %1,0 | 1 Eki 2008 |
30İzleyin | CVE-2008-6037Kavram kanıtı | SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v paavailscript · availscript article script · CWE-89 | Yüksek7,5 | — | %1,0 | 3 Şub 2009 |
27İzleyin | CVE-2008-6900Kavram kanıtı | Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authenticaavailscript · availscript article script · CWE-94 | Orta6,5 | — | %3,3 | 5 Ağu 2009 |
25İzleyin | CVE-2008-7021Kavram kanıtı | Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitravailscript · jobs portal script | Orta6,0 | — | %2,7 | 21 Ağu 2009 |
17İzleyin | CVE-2008-4372Kavram kanıtı | Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web scripavailscript · availscript article script · CWE-79 | Orta4,3 | — | %1,5 | 1 Eki 2008 |
17İzleyin | CVE-2008-4370Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTMLavailscript · availscript photo album · CWE-79 | Orta4,3 | — | %1,4 | 1 Eki 2008 |
- CVE-2008-437130İzleyin
SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %1availscript · availscript article script1 Eki 2008
- CVE-2008-436930İzleyin
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid par
YüksekCVSS 7,5Kavram kanıtıEPSS %1availscript · availscript photo album1 Eki 2008
- CVE-2008-437330İzleyin
SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL com
YüksekCVSS 7,5Kavram kanıtıEPSS %1availscript · availscript jobs portal script1 Eki 2008
- CVE-2008-437530İzleyin
SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via
YüksekCVSS 7,5Kavram kanıtıEPSS %1availscript · availscript classmate script1 Eki 2008
- CVE-2008-603730İzleyin
SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v pa
YüksekCVSS 7,5Kavram kanıtıEPSS %1availscript · availscript article script3 Şub 2009
- CVE-2008-690027İzleyin
Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authentica
OrtaCVSS 6,5Kavram kanıtıEPSS %3availscript · availscript article script5 Ağu 2009
- CVE-2008-702125İzleyin
Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitr
OrtaCVSS 6,0Kavram kanıtıEPSS %3availscript · jobs portal script21 Ağu 2009
- CVE-2008-437217İzleyin
Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web scrip
OrtaCVSS 4,3Kavram kanıtıEPSS %1availscript · availscript article script1 Eki 2008
- CVE-2008-437017İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1availscript · availscript photo album1 Eki 2008