ed01-cms project kayıtları
ed01-cms project üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2020-18261İstismar yok | An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.ed01-cms project · ed01-cms · CWE-434 | Kritik9,8 | — | %1,3 | 3 Kas 2021 |
39İzleyin | CVE-2020-18262İstismar yok | ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.ed01-cms project · ed01-cms · CWE-89 | Kritik9,8 | — | %0,9 | 3 Kas 2021 |
39İzleyin | CVE-2022-28524İstismar yok | ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.ed01-cms project · ed01-cms · CWE-89 | Kritik9,8 | — | %0,9 | 26 Nis 2022 |
35İzleyin | CVE-2022-28525İstismar yok | ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.ed01-cms project · ed01-cms · CWE-434 | Yüksek8,8 | — | %1,0 | 26 Nis 2022 |
24İzleyin | CVE-2020-18259İstismar yok | ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php.ed01-cms project · ed01-cms · CWE-79 | Orta6,1 | — | %0,6 | 3 Kas 2021 |
18İzleyin | CVE-2024-30890İstismar yok | Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component.ed01-cms project · ed01-cms · CWE-79 | Orta4,7 | — | %0,4 | 25 Nis 2024 |
- CVE-2020-1826139İzleyin
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
KritikCVSS 9,8İstismar yokEPSS %1ed01-cms project · ed01-cms3 Kas 2021
- CVE-2020-1826239İzleyin
ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.
KritikCVSS 9,8İstismar yokEPSS %0ed01-cms project · ed01-cms3 Kas 2021
- CVE-2022-2852439İzleyin
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
KritikCVSS 9,8İstismar yokEPSS %0ed01-cms project · ed01-cms26 Nis 2022
- CVE-2022-2852535İzleyin
ED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin/users.php?source=edit_user&id=1.
YüksekCVSS 8,8İstismar yokEPSS %1ed01-cms project · ed01-cms26 Nis 2022
- CVE-2020-1825924İzleyin
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php.
OrtaCVSS 6,1İstismar yokEPSS %0ed01-cms project · ed01-cms3 Kas 2021
- CVE-2024-3089018İzleyin
Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component.
OrtaCVSS 4,7İstismar yokEPSS %0ed01-cms project · ed01-cms25 Nis 2024