ecisp kayıtları

ecisp üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-94 Improper Control of Generation of Code ('Code Injection')3
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
45Planlayın	CVE-2022-44088İstismar yok	ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.ecisp · espcms · CWE-94 pre-auth RCE	Kritik9,8	—	%20,1	10 Kas 2022
39İzleyin	CVE-2022-44087İstismar yok	ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT.ecisp · espcms · CWE-94 pre-auth RCE	Kritik9,8	—	%1,6	10 Kas 2022
39İzleyin	CVE-2022-44089İstismar yok	ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.ecisp · espcms · CWE-94 pre-auth RCE	Kritik9,8	—	%1,6	10 Kas 2022
30İzleyin	CVE-2020-18913İstismar yok	EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parametecisp · espcms-p8 · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%1,3	24 Ağu 2021
29İzleyin	CVE-2022-33085İstismar yok	ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_puecisp · espcms-p8 RCE	Yüksek7,2	—	%1,9	30 Haz 2022
28İzleyin	CVE-2023-23007İstismar yok	An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function nodecisp · espcms · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,6	17 Şub 2023
19İzleyin	CVE-2020-18404İstismar yok	An issue was discovered in espcms version P8.18101601.ecisp · espcms · CWE-79 RCE XSS	Orta4,8	—	%0,4	27 Haz 2023

CVE-2022-44088
45Planlayın
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION.
KritikCVSS 9,8İstismar yokEPSS %20
- pre-auth RCE
ecisp · espcms10 Kas 2022
CVE-2022-44087
39İzleyin
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
ecisp · espcms10 Kas 2022
CVE-2022-44089
39İzleyin
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
ecisp · espcms10 Kas 2022
CVE-2020-18913
30İzleyin
EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array paramet
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
ecisp · espcms-p824 Ağu 2021
CVE-2022-33085
29İzleyin
ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_pu
YüksekCVSS 7,2İstismar yokEPSS %2
- RCE
ecisp · espcms-p830 Haz 2022
CVE-2023-23007
28İzleyin
An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function nod
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
ecisp · espcms17 Şub 2023
CVE-2020-18404
19İzleyin
An issue was discovered in espcms version P8.18101601.
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
ecisp · espcms27 Haz 2023