collector kayıtları
collector üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-287 Improper Authentication2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
27İzleyin | CVE-2009-1826Kavram kanıtı | modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to collector · mygesuad · CWE-287 | Orta6,5 | — | %2,0 | 29 May 2009 |
24İzleyin | CVE-2009-1810Kavram kanıtı | Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser paramecollector · mycolex · CWE-89 | Orta6,0 | — | %0,8 | 29 May 2009 |
24İzleyin | CVE-2009-1812Kavram kanıtı | Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the forcollector · mygesuad · CWE-89 | Orta6,0 | — | %0,8 | 29 May 2009 |
17İzleyin | CVE-2009-1825Kavram kanıtı | modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accollector · mycolex · CWE-287 | Orta4,0 | — | %2,4 | 29 May 2009 |
17İzleyin | CVE-2009-1809Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) tcollector · mycolex · CWE-79 | Orta4,3 | — | %1,4 | 29 May 2009 |
17İzleyin | CVE-2009-1811Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTcollector · mygesuad · CWE-79 | Orta4,3 | — | %1,4 | 29 May 2009 |
- CVE-2009-182627İzleyin
modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to
OrtaCVSS 6,5Kavram kanıtıEPSS %2collector · mygesuad29 May 2009
- CVE-2009-181024İzleyin
Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parame
OrtaCVSS 6,0Kavram kanıtıEPSS %0collector · mycolex29 May 2009
- CVE-2009-181224İzleyin
Multiple SQL injection vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to execute arbitrary SQL commands via (1) the for
OrtaCVSS 6,0Kavram kanıtıEPSS %0collector · mygesuad29 May 2009
- CVE-2009-182517İzleyin
modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user ac
OrtaCVSS 4,0Kavram kanıtıEPSS %2collector · mycolex29 May 2009
- CVE-2009-180917İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) t
OrtaCVSS 4,3Kavram kanıtıEPSS %1collector · mycolex29 May 2009
- CVE-2009-181117İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HT
OrtaCVSS 4,3Kavram kanıtıEPSS %1collector · mygesuad29 May 2009