dasinfomedia kayıtları
dasinfomedia üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-862 Missing Authorization2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-9659İstismar yok | School Management <= 91.5.0 - Unauthenticated Arbitrary File Uploaddasinfomedia · school management system · CWE-434 | Kritik9,8 | — | %1,6 | 23 Kas 2024 |
36İzleyin | CVE-2017-14848Kavram kanıtı | WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.dasinfomedia · wphrm human resource management system · CWE-89 | Yüksek8,8 | — | %3,0 | 2 Eki 2017 |
36İzleyin | CVE-2017-14843Kavram kanıtı | Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.dasinfomedia · school management system · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
36İzleyin | CVE-2017-14844Kavram kanıtı | Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.dasinfomedia · wpgym gym management system · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
36İzleyin | CVE-2017-14845Kavram kanıtı | Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.dasinfomedia · wpchurch church management system · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
36İzleyin | CVE-2017-14846Kavram kanıtı | Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.dasinfomedia · hospital management system · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
36İzleyin | CVE-2017-14847Kavram kanıtı | Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.dasinfomedia · wpams apartment management system · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
36İzleyin | CVE-2017-14842Kavram kanıtı | Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.dasinfomedia · smsmaster multipurpose sms gateway · CWE-89 | Yüksek8,8 | — | %2,6 | 27 Eyl 2017 |
35İzleyin | CVE-2024-9660İstismar yok | School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Uploaddasinfomedia · school management system · CWE-434 | Yüksek8,8 | — | %1,0 | 23 Kas 2024 |
35İzleyin | CVE-2024-9658İstismar yok | School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalationdasinfomedia · school management system · CWE-288 | Yüksek8,8 | — | %0,3 | 7 Mar 2025 |
27İzleyin | CVE-2017-14841Kavram kanıtı | Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling.dasinfomedia · annual maintenance contract management system · CWE-434 | Orta6,5 | — | %2,2 | 27 Eyl 2017 |
26İzleyin | CVE-2024-12609İstismar yok | School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'dasinfomedia · school management system · CWE-89 | Orta6,5 | — | %0,3 | 7 Mar 2025 |
26İzleyin | CVE-2024-12607İstismar yok | School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'dasinfomedia · school management system · CWE-89 | Orta6,5 | — | %0,3 | 7 Mar 2025 |
21İzleyin | CVE-2024-12611İstismar yok | School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scriptingdasinfomedia · school management system · CWE-862 | Orta5,3 | — | %0,3 | 7 Mar 2025 |
21İzleyin | CVE-2024-12610İstismar yok | School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletiondasinfomedia · school management system · CWE-862 | Orta5,3 | — | %0,3 | 7 Mar 2025 |
- CVE-2024-965939İzleyin
School Management <= 91.5.0 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %1dasinfomedia · school management system23 Kas 2024
- CVE-2017-1484836İzleyin
WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %3dasinfomedia · wphrm human resource management system2 Eki 2017
- CVE-2017-1484336İzleyin
Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · school management system27 Eyl 2017
- CVE-2017-1484436İzleyin
Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · wpgym gym management system27 Eyl 2017
- CVE-2017-1484536İzleyin
Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · wpchurch church management system27 Eyl 2017
- CVE-2017-1484636İzleyin
Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · hospital management system27 Eyl 2017
- CVE-2017-1484736İzleyin
Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · wpams apartment management system27 Eyl 2017
- CVE-2017-1484236İzleyin
Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %2dasinfomedia · smsmaster multipurpose sms gateway27 Eyl 2017
- CVE-2024-966035İzleyin
School Management <= 91.5.0 - Authenticated (Student+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1dasinfomedia · school management system23 Kas 2024
- CVE-2024-965835İzleyin
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0dasinfomedia · school management system7 Mar 2025
- CVE-2017-1484127İzleyin
Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling.
OrtaCVSS 6,5Kavram kanıtıEPSS %2dasinfomedia · annual maintenance contract management system27 Eyl 2017
- CVE-2024-1260926İzleyin
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
OrtaCVSS 6,5İstismar yokEPSS %0dasinfomedia · school management system7 Mar 2025
- CVE-2024-1260726İzleyin
School Management System for Wordpress <= 92.0.0 - Authenticated (Subscriber+) SQL Injection via 'mj_smgt_show_event_task'
OrtaCVSS 6,5İstismar yokEPSS %0dasinfomedia · school management system7 Mar 2025
- CVE-2024-1261121İzleyin
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
OrtaCVSS 5,3İstismar yokEPSS %0dasinfomedia · school management system7 Mar 2025
- CVE-2024-1261021İzleyin
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
OrtaCVSS 5,3İstismar yokEPSS %0dasinfomedia · school management system7 Mar 2025