İçeriğe atla
Noroxi

codiad kayıtları

codiad üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%14,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 21
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2018-14009
    50Planlayın

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    codiad · codiad12 Tem 2018

  • CVE-2019-19208
    45Planlayın

    Codiad Web IDE through 2.8.4 allows PHP Code injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    codiad · codiad16 Mar 2020

  • CVE-2017-11366
    41Planlayın

    components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    codiad · codiad20 Ağu 2017

  • CVE-2020-14043
    35İzleyin

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later.

    YüksekCVSS 8,8İstismar yokEPSS %2

    codiad · codiad24 Ağu 2020

  • CVE-2018-19423
    33İzleyin

    Codiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an executable file.

    YüksekCVSS 7,2Kavram kanıtıEPSS %18

    codiad · codiad21 Kas 2018

  • CVE-2020-23355
    30İzleyin

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentica

    YüksekCVSS 7,5İstismar yokEPSS %1

    codiad · codiad27 Oca 2021

  • CVE-2017-1000125
    30İzleyin

    Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.

    YüksekCVSS 7,5İstismar yokEPSS %1

    codiad · codiad17 Kas 2017

  • CVE-2017-20178
    30İzleyin

    Codiad process.php saveJSON information disclosure

    YüksekCVSS 7,5İstismar yokEPSS %1

    codiad · codiad21 Şub 2023

  • CVE-2020-14044
    29İzleyin

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later.

    YüksekCVSS 7,2İstismar yokEPSS %3

    codiad · codiad24 Ağu 2020

  • CVE-2020-14042
    24İzleyin

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later.

    OrtaCVSS 6,1İstismar yokEPSS %1

    codiad · codiad25 Ağu 2020

  • CVE-2014-9581
    21İzleyin

    Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via

    OrtaCVSS 5,0Kavram kanıtıEPSS %4

    codiad · codiad8 Oca 2015

  • CVE-2024-26557
    21İzleyin

    Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter.

    OrtaCVSS 5,4İstismar yokEPSS %0

    codiad · codiad21 Mar 2024

  • CVE-2013-7257
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name

    OrtaCVSS 4,3İstismar yokEPSS %2

    codiad · codiad3 Oca 2014

  • CVE-2014-9582
    17İzleyin

    Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary we

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    codiad · codiad8 Oca 2015