creatiwity kayıtları
creatiwity üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-12065İstismar yok | A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP fcreatiwity · witycms · CWE-20 | Kritik9,8 | — | %2,6 | 8 Haz 2018 |
36İzleyin | CVE-2018-14029Kavram kanıtı | CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifyicreatiwity · witycms · CWE-352 | Yüksek8,8 | — | %2,5 | 12 Tem 2018 |
35İzleyin | CVE-2022-29725İstismar yok | An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.creatiwity · witycms · CWE-434 | Yüksek8,8 | — | %1,4 | 2 Haz 2022 |
21İzleyin | CVE-2018-16250İstismar yok | The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first nacreatiwity · witycms · CWE-79 | Orta5,4 | — | %0,6 | 20 Haz 2019 |
20İzleyin | CVE-2018-11512Kavram kanıtı | Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatcreatiwity · witycms · CWE-79 | Orta4,8 | — | %2,2 | 28 May 2018 |
19İzleyin | CVE-2018-16776İstismar yok | wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.creatiwity · witycms · CWE-79 | Orta4,8 | — | %0,7 | 10 Eyl 2018 |
17İzleyin | CVE-2018-16251İstismar yok | A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu.creatiwity · witycms · CWE-89 | Orta4,3 | — | %0,9 | 20 Haz 2019 |
- CVE-2018-1206540Planlayın
A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP f
KritikCVSS 9,8İstismar yokEPSS %3creatiwity · witycms8 Haz 2018
- CVE-2018-1402936İzleyin
CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifyi
YüksekCVSS 8,8Kavram kanıtıEPSS %2creatiwity · witycms12 Tem 2018
- CVE-2022-2972535İzleyin
An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.
YüksekCVSS 8,8İstismar yokEPSS %1creatiwity · witycms2 Haz 2022
- CVE-2018-1625021İzleyin
The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first na
OrtaCVSS 5,4İstismar yokEPSS %1creatiwity · witycms20 Haz 2019
- CVE-2018-1151220İzleyin
Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creat
OrtaCVSS 4,8Kavram kanıtıEPSS %2creatiwity · witycms28 May 2018
- CVE-2018-1677619İzleyin
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
OrtaCVSS 4,8İstismar yokEPSS %1creatiwity · witycms10 Eyl 2018
- CVE-2018-1625117İzleyin
A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu.
OrtaCVSS 4,3İstismar yokEPSS %1creatiwity · witycms20 Haz 2019