boonex kayıtları
boonex üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2008-3167Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execboonex · dolphin · CWE-94 | Kritik9,3 | — | %6,4 | 14 Tem 2008 |
39İzleyin | CVE-2008-3166Kavram kanıtı | PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows reboonex · ray · CWE-94 | Kritik9,3 | — | %6,2 | 14 Tem 2008 |
38İzleyin | CVE-2008-5167Kavram kanıtı | PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows boonex · orca · CWE-94 | Kritik9,3 | — | %3,1 | 19 Kas 2008 |
35İzleyin | CVE-2013-3638İstismar yok | SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathboonex · dolphin · CWE-89 | Yüksek8,8 | — | %1,4 | 6 Şub 2020 |
30İzleyin | CVE-2006-2133İstismar yok | SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via tboonex · barracuda | Yüksek7,5 | — | %1,1 | 1 May 2006 |
27İzleyin | CVE-2014-4333İstismar yok | Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijacboonex · dolphin · CWE-352 | Orta6,8 | — | %0,9 | 19 Haz 2014 |
26İzleyin | CVE-2014-3810İstismar yok | SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators toboonex · dolphin · CWE-89 | Orta6,5 | — | %1,6 | 19 Haz 2014 |
22İzleyin | CVE-2006-4189İstismar yok | Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[boonex · dolphin | Orta5,1 | — | %6,3 | 16 Ağu 2006 |
20İzleyin | CVE-2006-5410İstismar yok | PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbboonex · dolphin | Orta5,1 | — | %1,5 | 20 Eki 2006 |
20İzleyin | CVE-2011-3728İstismar yok | Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation paboonex · dolphin · CWE-200 | Orta5,0 | — | %1,2 | 23 Eyl 2011 |
19İzleyin | CVE-2021-27969İstismar yok | Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.boonex · dolphin · CWE-79 | Orta4,8 | — | %0,6 | 23 Mar 2021 |
18İzleyin | CVE-2012-0873Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or boonex · dolphin · CWE-79 | Orta4,3 | — | %4,1 | 23 Şub 2012 |
17İzleyin | CVE-2006-0833İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTMLboonex · barracuda directory | Orta4,3 | — | %1,1 | 21 Şub 2006 |
14İzleyin | CVE-2009-2919İstismar yok | Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HTboonex · orca · CWE-79 | Düşük3,5 | — | %0,8 | 21 Ağu 2009 |
- CVE-2008-316739İzleyin
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to exec
KritikCVSS 9,3Kavram kanıtıEPSS %6boonex · dolphin14 Tem 2008
- CVE-2008-316639İzleyin
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows re
KritikCVSS 9,3Kavram kanıtıEPSS %6boonex · ray14 Tem 2008
- CVE-2008-516738İzleyin
PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_globals is enabled, allows
KritikCVSS 9,3Kavram kanıtıEPSS %3boonex · orca19 Kas 2008
- CVE-2013-363835İzleyin
SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'path
YüksekCVSS 8,8İstismar yokEPSS %1boonex · dolphin6 Şub 2020
- CVE-2006-213330İzleyin
SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via t
YüksekCVSS 7,5İstismar yokEPSS %1boonex · barracuda1 May 2006
- CVE-2014-433327İzleyin
Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijac
OrtaCVSS 6,8İstismar yokEPSS %0boonex · dolphin19 Haz 2014
- CVE-2014-381026İzleyin
SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to
OrtaCVSS 6,5İstismar yokEPSS %1boonex · dolphin19 Haz 2014
- CVE-2006-418922İzleyin
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[
OrtaCVSS 5,1İstismar yokEPSS %6boonex · dolphin16 Ağu 2006
- CVE-2006-541020İzleyin
PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arb
OrtaCVSS 5,1İstismar yokEPSS %1boonex · dolphin20 Eki 2006
- CVE-2011-372820İzleyin
Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pa
OrtaCVSS 5,0İstismar yokEPSS %1boonex · dolphin23 Eyl 2011
- CVE-2021-2796919İzleyin
Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.
OrtaCVSS 4,8İstismar yokEPSS %0boonex · dolphin23 Mar 2021
- CVE-2012-087318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or
OrtaCVSS 4,3Kavram kanıtıEPSS %4boonex · dolphin23 Şub 2012
- CVE-2006-083317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %1boonex · barracuda directory21 Şub 2006
- CVE-2009-291914İzleyin
Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitrary web script or HT
DüşükCVSS 3,5İstismar yokEPSS %0boonex · orca21 Ağu 2009