duxcms project kayıtları
duxcms project üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
39İzleyin | CVE-2021-3242İstismar yok | DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.duxcms project · duxcms · CWE-89 | Kritik9,8 | %1,216 Şub 2022 |
35İzleyin | CVE-2020-21861İstismar yok | File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.duxcms project · duxcms · CWE-434 | Yüksek8,8 | %0,76 Tem 2023 |
32İzleyin | CVE-2020-21862İstismar yok | Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.duxcms project · duxcms · CWE-22 | Yüksek8,1 | %0,96 Tem 2023 |
32İzleyin | CVE-2020-36610İstismar yok | annyshow DuxCMS cross-site request forgeryduxcms project · duxcms · CWE-863 | Yüksek8,0 | %0,48 Ara 2022 |
26İzleyin | CVE-2020-21881İstismar yok | Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/aduxcms project · duxcms · CWE-352 | Orta6,5 | %0,331 Tem 2023 |
24İzleyin | CVE-2024-37791Kavram kanıtı | DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id.CWE-89 | Orta6,0 | %0,618 Haz 2024 |
21İzleyin | CVE-2020-36763İstismar yok | Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parametduxcms project · duxcms · CWE-79 | Orta5,4 | %0,431 Tem 2023 |
21İzleyin | CVE-2020-36609İstismar yok | annyshow DuxCMS Article edit cross site scriptingduxcms project · duxcms · CWE-707 | Orta5,4 | %0,48 Ara 2022 |
- CVE-2021-324239İzleyin
DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.
KritikCVSS 9,8İstismar yokEPSS %1duxcms project · duxcms16 Şub 2022
- CVE-2020-2186135İzleyin
File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
YüksekCVSS 8,8İstismar yokEPSS %0duxcms project · duxcms6 Tem 2023
- CVE-2020-2186232İzleyin
Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
YüksekCVSS 8,1İstismar yokEPSS %0duxcms project · duxcms6 Tem 2023
- CVE-2020-3661032İzleyin
annyshow DuxCMS cross-site request forgery
YüksekCVSS 8,0İstismar yokEPSS %0duxcms project · duxcms8 Ara 2022
- CVE-2020-2188126İzleyin
Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/a
OrtaCVSS 6,5İstismar yokEPSS %0duxcms project · duxcms31 Tem 2023
- CVE-2024-3779124İzleyin
DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id.
OrtaCVSS 6,0Kavram kanıtıEPSS %018 Haz 2024
- CVE-2020-3676321İzleyin
Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom paramet
OrtaCVSS 5,4İstismar yokEPSS %0duxcms project · duxcms31 Tem 2023
- CVE-2020-3660921İzleyin
annyshow DuxCMS Article edit cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %0duxcms project · duxcms8 Ara 2022