chevereto kayıtları
chevereto üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
24İzleyin | CVE-2021-31721İstismar yok | Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.chevereto · chevereto · CWE-79 | Orta6,1 | — | %0,8 | 30 Haz 2021 |
24İzleyin | CVE-2017-1000058İstismar yok | Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.chevereto · chevereto · CWE-79 | Orta6,1 | — | %0,7 | 17 Tem 2017 |
21İzleyin | CVE-2012-2919Kavram kanıtı | Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary fichevereto · chevereto · CWE-22 | Orta5,0 | — | %3,2 | 21 May 2012 |
21İzleyin | CVE-2018-12030İstismar yok | Chevereto Free before 1.0.13 has XSS.chevereto · chevereto · CWE-79 | Orta5,4 | — | %0,6 | 15 Haz 2018 |
17İzleyin | CVE-2012-2918Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTchevereto · chevereto · CWE-79 | Orta4,3 | — | %1,6 | 21 May 2012 |
- CVE-2021-3172124İzleyin
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
OrtaCVSS 6,1İstismar yokEPSS %0chevereto · chevereto30 Haz 2021
- CVE-2017-100005824İzleyin
Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.
OrtaCVSS 6,1İstismar yokEPSS %0chevereto · chevereto17 Tem 2017
- CVE-2012-291921İzleyin
Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary fi
OrtaCVSS 5,0Kavram kanıtıEPSS %3chevereto · chevereto21 May 2012
- CVE-2018-1203021İzleyin
Chevereto Free before 1.0.13 has XSS.
OrtaCVSS 5,4İstismar yokEPSS %0chevereto · chevereto15 Haz 2018
- CVE-2012-291817İzleyin
Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HT
OrtaCVSS 4,3Kavram kanıtıEPSS %1chevereto · chevereto21 May 2012