damicms kayıtları
damicms üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-330 Use of Insufficiently Random Values1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-16239İstismar yok | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-330 | Kritik9,8 | — | %1,2 | 30 Ağu 2018 |
36İzleyin | CVE-2018-15844Kavram kanıtı | An issue was discovered in DamiCMS 6.0.0.damicms · damicms · CWE-352 | Yüksek8,8 | — | %2,5 | 25 Ağu 2018 |
35İzleyin | CVE-2018-13031İstismar yok | DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.damicms · damicms · CWE-352 | Yüksek8,8 | — | %1,1 | 5 Tem 2018 |
35İzleyin | CVE-2020-21236İstismar yok | A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts damicms · damicms · CWE-352 | Yüksek8,8 | — | %0,5 | 27 Ara 2021 |
35İzleyin | CVE-2018-16331İstismar yok | admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.damicms · damicms · CWE-352 | Yüksek8,8 | — | %0,5 | 1 Eyl 2018 |
32İzleyin | CVE-2020-18458İstismar yok | Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.damicms · damicms · CWE-352 | Yüksek8,0 | — | %0,5 | 12 Ağu 2021 |
30İzleyin | CVE-2018-20571İstismar yok | DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tdamicms · damicms · CWE-200 | Yüksek7,5 | — | %1,4 | 28 Ara 2018 |
29İzleyin | CVE-2018-16238İstismar yok | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-20 | Yüksek7,2 | — | %2,2 | 30 Ağu 2018 |
19İzleyin | CVE-2018-14831İstismar yok | An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafdamicms · damicms · CWE-200 | Orta4,9 | — | %1,6 | 10 Tem 2019 |
19İzleyin | CVE-2020-18451İstismar yok | Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.damicms · damicms · CWE-79 | Orta4,8 | — | %0,5 | 12 Ağu 2021 |
10İzleyin | CVE-2018-16237İstismar yok | An issue was discovered in damiCMS V6.0.1.damicms · damicms · CWE-22 | Düşük2,7 | — | %1,2 | 30 Ağu 2018 |
- CVE-2018-1623939İzleyin
An issue was discovered in damiCMS V6.0.1.
KritikCVSS 9,8İstismar yokEPSS %1damicms · damicms30 Ağu 2018
- CVE-2018-1584436İzleyin
An issue was discovered in DamiCMS 6.0.0.
YüksekCVSS 8,8Kavram kanıtıEPSS %2damicms · damicms25 Ağu 2018
- CVE-2018-1303135İzleyin
DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.
YüksekCVSS 8,8İstismar yokEPSS %1damicms · damicms5 Tem 2018
- CVE-2020-2123635İzleyin
A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts
YüksekCVSS 8,8İstismar yokEPSS %1damicms · damicms27 Ara 2021
- CVE-2018-1633135İzleyin
admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.
YüksekCVSS 8,8İstismar yokEPSS %1damicms · damicms1 Eyl 2018
- CVE-2020-1845832İzleyin
Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
YüksekCVSS 8,0İstismar yokEPSS %0damicms · damicms12 Ağu 2021
- CVE-2018-2057130İzleyin
DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T
YüksekCVSS 7,5İstismar yokEPSS %1damicms · damicms28 Ara 2018
- CVE-2018-1623829İzleyin
An issue was discovered in damiCMS V6.0.1.
YüksekCVSS 7,2İstismar yokEPSS %2damicms · damicms30 Ağu 2018
- CVE-2018-1483119İzleyin
An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf
OrtaCVSS 4,9İstismar yokEPSS %2damicms · damicms10 Tem 2019
- CVE-2020-1845119İzleyin
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
OrtaCVSS 4,8İstismar yokEPSS %1damicms · damicms12 Ağu 2021
- CVE-2018-1623710İzleyin
An issue was discovered in damiCMS V6.0.1.
DüşükCVSS 2,7İstismar yokEPSS %1damicms · damicms30 Ağu 2018