İçeriğe atla
Noroxi

catfish-cms kayıtları

catfish-cms üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

9 kayıt
  • CVE-2018-18735
    35İzleyin

    A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.

    YüksekCVSS 8,8İstismar yokEPSS %1

    catfish-cms · catfish blog29 Eki 2018

  • CVE-2018-18734
    35İzleyin

    A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.

    YüksekCVSS 8,8İstismar yokEPSS %0

    catfish-cms · catfish cms29 Eki 2018

  • CVE-2021-45017
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that us

    YüksekCVSS 8,8İstismar yokEPSS %0

    catfish-cms · catfish cms15 Ara 2021

  • CVE-2020-23962
    24İzleyin

    A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted pay

    OrtaCVSS 6,1İstismar yokEPSS %1

    catfish-cms · catfish cms23 Haz 2021

  • CVE-2021-45018
    24İzleyin

    Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.html

    OrtaCVSS 6,1İstismar yokEPSS %1

    catfish-cms · catfish cms15 Ara 2021

  • CVE-2018-10023
    21İzleyin

    Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment).

    OrtaCVSS 5,4İstismar yokEPSS %1

    catfish-cms · catfish cms11 Nis 2018

  • CVE-2018-18736
    21İzleyin

    An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."

    OrtaCVSS 5,4İstismar yokEPSS %1

    catfish-cms · catfish blog29 Eki 2018

  • CVE-2018-18733
    21İzleyin

    An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999.

    OrtaCVSS 5,4İstismar yokEPSS %1

    catfish-cms · catfish cms29 Eki 2018

  • CVE-2018-13999
    19İzleyin

    Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).

    OrtaCVSS 4,8İstismar yokEPSS %1

    catfish-cms · catfish cms12 Tem 2018