dswjcms project kayıtları
dswjcms project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2020-19267İstismar yok | An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.dswjcms project · dswjcms · CWE-434 | Kritik9,8 | — | %1,6 | 9 Eyl 2021 |
24İzleyin | CVE-2020-19265İstismar yok | A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to executdswjcms project · dswjcms · CWE-79 | Orta6,1 | — | %0,6 | 9 Eyl 2021 |
24İzleyin | CVE-2020-19266İstismar yok | A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to edswjcms project · dswjcms · CWE-79 | Orta6,1 | — | %0,6 | 9 Eyl 2021 |
22İzleyin | CVE-2020-19268İstismar yok | A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add admindswjcms project · dswjcms · CWE-352 | Orta5,7 | — | %0,3 | 9 Eyl 2021 |
- CVE-2020-1926739İzleyin
An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
KritikCVSS 9,8İstismar yokEPSS %1dswjcms project · dswjcms9 Eyl 2021
- CVE-2020-1926524İzleyin
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execut
OrtaCVSS 6,1İstismar yokEPSS %0dswjcms project · dswjcms9 Eyl 2021
- CVE-2020-1926624İzleyin
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to e
OrtaCVSS 6,1İstismar yokEPSS %0dswjcms project · dswjcms9 Eyl 2021
- CVE-2020-1926822İzleyin
A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add admin
OrtaCVSS 5,7İstismar yokEPSS %0dswjcms project · dswjcms9 Eyl 2021