İçeriğe atla
Noroxi

Croogo kayıtları

croogo üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%53,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 22
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2021-44673
    38İzleyin

    A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a w

    YüksekCVSS 8,8Kavram kanıtıEPSS %8

    croogo · croogo10 Mar 2022

  • CVE-2024-29643
    36İzleyin

    An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.

    KritikCVSS 9,1İstismar yokEPSS %0

    croogo · croogo18 Nis 2025

  • CVE-2024-42718
    26İzleyin

    A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit

    OrtaCVSS 6,5İstismar yokEPSS %0

    croogo · croogo26 Ara 2025

  • CVE-2017-1000510
    21İzleyin

    Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript

    OrtaCVSS 5,4İstismar yokEPSS %0

    croogo · croogo9 Şub 2018

  • CVE-2024-6647
    20İzleyin

    Croogo Setting Theme unrestricted upload

    OrtaCVSS 5,1İstismar yokEPSS %0

    10 Tem 2024

  • CVE-2019-20789
    19İzleyin

    Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo26 Nis 2020

  • CVE-2019-7170
    19İzleyin

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo29 Oca 2019

  • CVE-2019-7168
    19İzleyin

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /ad

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo29 Oca 2019

  • CVE-2019-7169
    19İzleyin

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo29 Oca 2019

  • CVE-2019-7171
    19İzleyin

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo29 Oca 2019

  • CVE-2019-7173
    19İzleyin

    A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a

    OrtaCVSS 4,8İstismar yokEPSS %0

    croogo · croogo29 Oca 2019

  • CVE-2014-8577
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3Kavram kanıtıEPSS %4

    croogo · croogo31 Eki 2014

  • CVE-2015-1053
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary we

    OrtaCVSS 4,3İstismar yokEPSS %2

    croogo · croogo16 Oca 2015