cmscout kayıtları
cmscout üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-3415Kavram kanıtı | Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execmscout · cmscout · CWE-22 | Yüksek7,5 | — | %2,9 | 31 Tem 2008 |
31İzleyin | CVE-2010-5059Kavram kanıtı | SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter cmscout · cmscout · CWE-89 | Yüksek7,5 | — | %2,1 | 22 Kas 2011 |
30İzleyin | CVE-2007-3812Kavram kanıtı | SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f pacmscout · cmscout | Yüksek7,5 | — | %1,2 | 16 Tem 2007 |
28İzleyin | CVE-2006-2188İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTMcmscout · cmscout | Orta6,8 | — | %2,6 | 4 May 2006 |
25İzleyin | CVE-2008-6726Kavram kanıtı | Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and executcmscout · cmscout · CWE-22 | Orta6,0 | — | %2,1 | 17 Nis 2009 |
24İzleyin | CVE-2008-6725Kavram kanıtı | Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id parametcmscout · cmscout · CWE-89 | Orta6,0 | — | %1,0 | 17 Nis 2009 |
18İzleyin | CVE-2010-2154Kavram kanıtı | Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject cmscout · cmscout · CWE-79 | Orta4,3 | — | %3,0 | 3 Haz 2010 |
- CVE-2008-341531İzleyin
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and exe
YüksekCVSS 7,5Kavram kanıtıEPSS %3cmscout · cmscout31 Tem 2008
- CVE-2010-505931İzleyin
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter
YüksekCVSS 7,5Kavram kanıtıEPSS %2cmscout · cmscout22 Kas 2011
- CVE-2007-381230İzleyin
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f pa
YüksekCVSS 7,5Kavram kanıtıEPSS %1cmscout · cmscout16 Tem 2007
- CVE-2006-218828İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTM
OrtaCVSS 6,8İstismar yokEPSS %3cmscout · cmscout4 May 2006
- CVE-2008-672625İzleyin
Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execut
OrtaCVSS 6,0Kavram kanıtıEPSS %2cmscout · cmscout17 Nis 2009
- CVE-2008-672524İzleyin
Multiple SQL injection vulnerabilities in CMScout 2.06 allow remote authenticated users to execute arbitrary SQL commands via the id paramet
OrtaCVSS 6,0Kavram kanıtıEPSS %1cmscout · cmscout17 Nis 2009
- CVE-2010-215418İzleyin
Cross-site scripting (XSS) vulnerability in the Search Site in CMScout 2.09, and possibly other versions, allows remote attackers to inject
OrtaCVSS 4,3Kavram kanıtıEPSS %3cmscout · cmscout3 Haz 2010