İçeriğe atla
Noroxi

boltcms kayıtları

boltcms üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %10,5
Pre-auth RCE
1
Düzeltme kaydı olan
%52,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2015-7309
    38İzleyin

    The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to exec

    OrtaCVSS 6,5SilahlaştırılmışEPSS %39

    boltcms · bolt22 Eyl 2015

  • CVE-2019-10874
    36İzleyin

    Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    boltcms · bolt5 Nis 2019

  • CVE-2019-9185
    36İzleyin

    Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by rena

    YüksekCVSS 8,8İstismar yokEPSS %3

    boltcms · bolt7 Mar 2019

  • CVE-2022-31321
    36İzleyin

    The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeratio

    KritikCVSS 9,1İstismar yokEPSS %1

    boltcms · bolt1 Ağu 2022

  • CVE-2025-34086
    31İzleyin

    Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename

    YüksekCVSS 7,5SilahlaştırılmışEPSS %4

    boltcms · bolt3 Tem 2025

  • CVE-2021-27367
    31İzleyin

    Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

    YüksekCVSS 7,5İstismar yokEPSS %2

    boltcms · bolt17 Şub 2021

  • CVE-2020-4041
    25İzleyin

    The filename of uploaded files vulnerable to stored XSS in Bolt CMS

    OrtaCVSS 6,1İstismar yokEPSS %2

    boltcms · bolt8 Haz 2020

  • CVE-2019-9553
    25İzleyin

    Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    boltcms · bolt31 Ara 2019

  • CVE-2019-15485
    24İzleyin

    Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    boltcms · bolt23 Ağu 2019

  • CVE-2019-15484
    24İzleyin

    Bolt before 3.6.10 has XSS via an image's alt or title field.

    OrtaCVSS 6,1İstismar yokEPSS %1

    boltcms · bolt23 Ağu 2019

  • CVE-2019-15483
    24İzleyin

    Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.

    OrtaCVSS 6,1İstismar yokEPSS %1

    boltcms · bolt23 Ağu 2019

  • CVE-2019-20058
    24İzleyin

    Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page.

    OrtaCVSS 6,1İstismar yokEPSS %1

    boltcms · bolt29 Ara 2019

  • CVE-2017-16754
    22İzleyin

    Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventLis

    OrtaCVSS 5,3İstismar yokEPSS %2

    boltcms · bolt9 Kas 2017

  • CVE-2020-28925
    21İzleyin

    Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Y

    OrtaCVSS 5,3İstismar yokEPSS %1

    boltcms · bolt30 Ara 2020

  • CVE-2017-11127
    21İzleyin

    Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.

    OrtaCVSS 5,4İstismar yokEPSS %1

    boltcms · bolt17 Tem 2017

  • CVE-2017-11128
    21İzleyin

    Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.

    OrtaCVSS 5,4İstismar yokEPSS %1

    boltcms · bolt17 Tem 2017

  • CVE-2024-7300
    21İzleyin

    Bolt CMS Showcase Creation showcases cross site scripting

    OrtaCVSS 5,3İstismar yokEPSS %0

    boltcms · bolt31 Tem 2024

  • CVE-2024-7299
    21İzleyin

    Bolt CMS Entry Preview page cross site scripting

    OrtaCVSS 5,3İstismar yokEPSS %0

    boltcms · bolt31 Tem 2024

  • CVE-2020-4040
    18İzleyin

    CSRF issue on preview pages in Bolt CMS

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    boltcms · bolt8 Haz 2020