beescms kayıtları
beescms üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-31011İstismar yok | Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolatebeescms · beescms · CWE-94 | Kritik9,8 | — | %1,2 | 3 Nis 2024 |
36İzleyin | CVE-2018-12739Kavram kanıtı | In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.beescms · beescms · CWE-352 | Yüksek8,8 | — | %2,4 | 5 Tem 2018 |
35İzleyin | CVE-2020-23572İstismar yok | BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php.beescms · beescms · CWE-434 | Yüksek8,8 | — | %1,3 | 8 Kas 2021 |
35İzleyin | CVE-2019-8347İstismar yok | BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=usbeescms · beescms · CWE-352 | Yüksek8,8 | — | %0,7 | 15 Şub 2019 |
35İzleyin | CVE-2018-10266İstismar yok | BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.beescms · beescms · CWE-352 | Yüksek8,8 | — | %0,6 | 21 Nis 2018 |
26İzleyin | CVE-2020-22334İstismar yok | Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /abeescms · beescms · CWE-352 | Orta6,5 | — | %0,4 | 8 May 2023 |
- CVE-2024-3101139İzleyin
Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolate
KritikCVSS 9,8İstismar yokEPSS %1beescms · beescms3 Nis 2024
- CVE-2018-1273936İzleyin
In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
YüksekCVSS 8,8Kavram kanıtıEPSS %2beescms · beescms5 Tem 2018
- CVE-2020-2357235İzleyin
BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php.
YüksekCVSS 8,8İstismar yokEPSS %1beescms · beescms8 Kas 2021
- CVE-2019-834735İzleyin
BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=us
YüksekCVSS 8,8İstismar yokEPSS %1beescms · beescms15 Şub 2019
- CVE-2018-1026635İzleyin
BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.
YüksekCVSS 8,8İstismar yokEPSS %1beescms · beescms21 Nis 2018
- CVE-2020-2233426İzleyin
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /a
OrtaCVSS 6,5İstismar yokEPSS %0beescms · beescms8 May 2023