İçeriğe atla
Noroxi

cutephp kayıtları

cutephp üreticisine ait 39 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

39 kayıt
  • CVE-2008-4557
    54Planlayın

    plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code v

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    cutephp · cutenews14 Eki 2008

  • CVE-2019-11447
    51Planlayın

    An issue was discovered in CutePHP CuteNews 2.1.2.

    YüksekCVSS 8,8Kavram kanıtıEPSS %52

    cutephp · cutenews22 Nis 2019

  • CVE-2020-5558
    36İzleyin

    CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.

    YüksekCVSS 8,8İstismar yokEPSS %2

    cutephp · cutenews24 Mar 2020

  • CVE-2003-1240
    32İzleyin

    PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath par

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    cutephp · cutenews31 Ara 2003

  • CVE-2005-3010
    32İzleyin

    Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    cutephp · cutenews21 Eyl 2005

  • CVE-2006-4445
    31İzleyin

    Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the c

    YüksekCVSS 7,5İstismar yokEPSS %1

    cutephp · cutenews29 Ağu 2006

  • CVE-2004-1660
    31İzleyin

    PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath

    YüksekCVSS 7,5İstismar yokEPSS %1

    cutephp · cutenews30 Ağu 2004

  • CVE-2007-1153
    30İzleyin

    Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspec

    YüksekCVSS 7,5İstismar yokEPSS %1

    cutephp · cutenews2 Mar 2007

  • CVE-2004-0660
    28İzleyin

    Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows

    OrtaCVSS 6,8Kavram kanıtıEPSS %3

    cutephp · cutenews6 Ağu 2004

  • CVE-2006-1121
    28İzleyin

    Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query stri

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    cutephp · cutenews9 Mar 2006

  • CVE-2004-1573
    28İzleyin

    The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arb

    YüksekCVSS 7,2İstismar yokEPSS %0

    aj-fork · aj-fork31 Ara 2004

  • CVE-2009-4115
    27İzleyin

    Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenticated users with appl

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    cutephp · cutenews30 Kas 2009

  • CVE-2009-4173
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    cutephp · cutenews2 Ara 2009

  • CVE-2009-4113
    26İzleyin

    Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authentica

    OrtaCVSS 6,5İstismar yokEPSS %1

    cutephp · cutenews30 Kas 2009

  • CVE-2006-2250
    25İzleyin

    CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or (2) /inc/functions.i

    OrtaCVSS 6,4İstismar yokEPSS %1

    cutephp · cutenews9 May 2006

  • CVE-2005-3507
    24İzleyin

    Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges vi

    OrtaCVSS 5,0Kavram kanıtıEPSS %12

    cutephp · cutenews6 Kas 2005

  • CVE-2009-4174
    24İzleyin

    The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows remote authenticated u

    OrtaCVSS 6,0Kavram kanıtıEPSS %1

    cutephp · cutenews2 Ara 2009

  • CVE-2020-5557
    24İzleyin

    Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    OrtaCVSS 6,1İstismar yokEPSS %0

    cutephp · cutenews24 Mar 2020

  • CVE-2007-6662
    23İzleyin

    Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,8İstismar yokEPSS %1

    cutephp · cutenews4 Oca 2008

  • CVE-2009-4175
    21İzleyin

    CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an invalid date value in the

    OrtaCVSS 5,0Kavram kanıtıEPSS %2

    cutephp · cutenews2 Ara 2009

  • CVE-2006-1339
    20İzleyin

    Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled,

    OrtaCVSS 5,0İstismar yokEPSS %1

    cutephp · cutenews20 Mar 2006

  • CVE-2006-1340
    20İzleyin

    CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an inva

    OrtaCVSS 5,0İstismar yokEPSS %1

    cutephp · cutenews20 Mar 2006

  • CVE-2005-2394
    20İzleyin

    show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive parameter.

    OrtaCVSS 5,0İstismar yokEPSS %1

    cutephp · cutenews27 Tem 2005

  • CVE-2005-3592
    20İzleyin

    index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the application by triggering an

    OrtaCVSS 5,0İstismar yokEPSS %1

    cutephp · cutenews16 Kas 2005

  • CVE-2004-1659
    18İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Jour

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    cutephp · cutenews2 Eyl 2004