batflat kayıtları
batflat üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-276 Incorrect Default Permissions1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2020-35734İstismar yok | Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fieldbatflat · batflat · CWE-94 | Yüksek7,2 | — | %6,8 | 15 Şub 2021 |
30İzleyin | CVE-2021-41652İstismar yok | Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.batflat · batflat · CWE-276 | Yüksek7,5 | — | %1,1 | 1 Mar 2022 |
21İzleyin | CVE-2021-27677İstismar yok | Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML vibatflat · batflat · CWE-79 | Orta5,4 | — | %0,6 | 11 Mar 2021 |
21İzleyin | CVE-2021-27678İstismar yok | Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML viabatflat · batflat · CWE-79 | Orta5,4 | — | %0,6 | 11 Mar 2021 |
21İzleyin | CVE-2021-27679İstismar yok | Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML vbatflat · batflat · CWE-79 | Orta5,4 | — | %0,6 | 11 Mar 2021 |
- CVE-2020-3573430İzleyin
Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input field
YüksekCVSS 7,2İstismar yokEPSS %7batflat · batflat15 Şub 2021
- CVE-2021-4165230İzleyin
Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.
YüksekCVSS 7,5İstismar yokEPSS %1batflat · batflat1 Mar 2022
- CVE-2021-2767721İzleyin
Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 5,4İstismar yokEPSS %1batflat · batflat11 Mar 2021
- CVE-2021-2767821İzleyin
Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via
OrtaCVSS 5,4İstismar yokEPSS %1batflat · batflat11 Mar 2021
- CVE-2021-2767921İzleyin
Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 5,4İstismar yokEPSS %1batflat · batflat11 Mar 2021