baigo kayıtları
baigo üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-9227İstismar yok | An issue was discovered in baigo CMS 2.1.1.baigo · baigo cms · CWE-94 | Kritik9,8 | — | %3,7 | 28 Şub 2019 |
29İzleyin | CVE-2022-26607İstismar yok | A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploadbaigo · baigo cms · CWE-434 | Yüksek7,2 | — | %2,2 | 6 Nis 2022 |
29İzleyin | CVE-2019-10015İstismar yok | baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, becausbaigo · baigo sso · CWE-94 | Yüksek7,2 | — | %1,8 | 24 Mar 2019 |
26İzleyin | CVE-2018-16458İstismar yok | An issue was discovered in baigo CMS v2.1.1.baigo · baigo cms · CWE-352 | Orta6,5 | — | %0,4 | 4 Eyl 2018 |
24İzleyin | CVE-2020-20584İstismar yok | A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parametbaigo · baigo cms · CWE-79 | Orta6,1 | — | %1,1 | 8 Tem 2021 |
24İzleyin | CVE-2019-9226İstismar yok | An issue was discovered in baigo CMS 2.1.1.baigo · baigo cms · CWE-79 | Orta6,1 | — | %1,1 | 28 Şub 2019 |
- CVE-2019-922740Planlayın
An issue was discovered in baigo CMS 2.1.1.
KritikCVSS 9,8İstismar yokEPSS %4baigo · baigo cms28 Şub 2019
- CVE-2022-2660729İzleyin
A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via upload
YüksekCVSS 7,2İstismar yokEPSS %2baigo · baigo cms6 Nis 2022
- CVE-2019-1001529İzleyin
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, becaus
YüksekCVSS 7,2İstismar yokEPSS %2baigo · baigo sso24 Mar 2019
- CVE-2018-1645826İzleyin
An issue was discovered in baigo CMS v2.1.1.
OrtaCVSS 6,5İstismar yokEPSS %0baigo · baigo cms4 Eyl 2018
- CVE-2020-2058424İzleyin
A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form paramet
OrtaCVSS 6,1İstismar yokEPSS %1baigo · baigo cms8 Tem 2021
- CVE-2019-922624İzleyin
An issue was discovered in baigo CMS 2.1.1.
OrtaCVSS 6,1İstismar yokEPSS %1baigo · baigo cms28 Şub 2019