easycms kayıtları
easycms üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-23358İstismar yok | EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php.easycms · easycms · CWE-89 | Kritik9,8 | — | %1,2 | 16 Şub 2022 |
35İzleyin | CVE-2020-24271İstismar yok | A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuseasycms · easycms · CWE-352 | Yüksek8,8 | — | %0,6 | 1 Şub 2021 |
35İzleyin | CVE-2019-6294İstismar yok | An issue was discovered in EasyCMS 1.5.easycms · easycms · CWE-352 | Yüksek8,8 | — | %0,5 | 15 Oca 2019 |
35İzleyin | CVE-2018-16345İstismar yok | An issue was discovered in EasyCMS 1.5.easycms · easycms · CWE-352 | Yüksek8,8 | — | %0,5 | 2 Eyl 2018 |
26İzleyin | CVE-2018-12971İstismar yok | EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users.easycms · easycms · CWE-352 | Orta6,5 | — | %0,4 | 29 Haz 2018 |
24İzleyin | CVE-2018-16759İstismar yok | The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS viaeasycms · easycms · CWE-79 | Orta6,1 | — | %0,7 | 9 Eyl 2018 |
24İzleyin | CVE-2018-10374İstismar yok | EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request.easycms · easycms · CWE-79 | Orta6,1 | — | %0,7 | 25 Nis 2018 |
24İzleyin | CVE-2018-17113İstismar yok | App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, easycms · easycms · CWE-79 | Orta6,1 | — | %0,6 | 17 Eyl 2018 |
22İzleyin | CVE-2026-1105İstismar yok | EasyCMS UserAction.class.php sql injectioneasycms · easycms · CWE-74 | Orta5,5 | — | %0,5 | 17 Oca 2026 |
19İzleyin | CVE-2018-16773İstismar yok | EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.easycms · easycms · CWE-79 | Orta4,8 | — | %0,5 | 10 Eyl 2018 |
8İzleyin | CVE-2026-3785İstismar yok | EasyCMS Request Parameter RbacnodeAction.class.php sql injectioneasycms · easycms · CWE-74 | Düşük2,1 | — | %0,5 | 8 Mar 2026 |
8İzleyin | CVE-2026-3786Kavram kanıtı | EasyCMS Request Parameter RbacuserAction.class.php sql injectioneasycms · easycms · CWE-74 | Düşük2,1 | — | %0,5 | 8 Mar 2026 |
- CVE-2022-2335839İzleyin
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php.
KritikCVSS 9,8İstismar yokEPSS %1easycms · easycms16 Şub 2022
- CVE-2020-2427135İzleyin
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacus
YüksekCVSS 8,8İstismar yokEPSS %1easycms · easycms1 Şub 2021
- CVE-2019-629435İzleyin
An issue was discovered in EasyCMS 1.5.
YüksekCVSS 8,8İstismar yokEPSS %1easycms · easycms15 Oca 2019
- CVE-2018-1634535İzleyin
An issue was discovered in EasyCMS 1.5.
YüksekCVSS 8,8İstismar yokEPSS %1easycms · easycms2 Eyl 2018
- CVE-2018-1297126İzleyin
EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users.
OrtaCVSS 6,5İstismar yokEPSS %0easycms · easycms29 Haz 2018
- CVE-2018-1675924İzleyin
The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via
OrtaCVSS 6,1İstismar yokEPSS %1easycms · easycms9 Eyl 2018
- CVE-2018-1037424İzleyin
EasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index/search/index.html request.
OrtaCVSS 6,1İstismar yokEPSS %1easycms · easycms25 Nis 2018
- CVE-2018-1711324İzleyin
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter,
OrtaCVSS 6,1İstismar yokEPSS %1easycms · easycms17 Eyl 2018
- CVE-2026-110522İzleyin
EasyCMS UserAction.class.php sql injection
OrtaCVSS 5,5İstismar yokEPSS %0easycms · easycms17 Oca 2026
- CVE-2018-1677319İzleyin
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
OrtaCVSS 4,8İstismar yokEPSS %1easycms · easycms10 Eyl 2018
- CVE-2026-37858İzleyin
EasyCMS Request Parameter RbacnodeAction.class.php sql injection
DüşükCVSS 2,1İstismar yokEPSS %0easycms · easycms8 Mar 2026
- CVE-2026-37868İzleyin
EasyCMS Request Parameter RbacuserAction.class.php sql injection
DüşükCVSS 2,1Kavram kanıtıEPSS %0easycms · easycms8 Mar 2026