İçeriğe atla
Noroxi

efiction project kayıtları

efiction project üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

      Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

      CWE

      Saldırı profili

      Tüm kayıtlar

      8 kayıt
      • CVE-2005-4171
        32İzleyin

        The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to ex

        YüksekCVSS 7,5Kavram kanıtıEPSS %7

        efiction project · efiction11 Ara 2005

      • CVE-2005-4168
        31İzleyin

        Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the le

        YüksekCVSS 7,5Kavram kanıtıEPSS %3

        efiction project · efiction11 Ara 2005

      • CVE-2005-4169
        31İzleyin

        Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in

        YüksekCVSS 7,5Kavram kanıtıEPSS %2

        efiction project · efiction11 Ara 2005

      • CVE-2005-4170
        31İzleyin

        SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.

        YüksekCVSS 7,5Kavram kanıtıEPSS %2

        efiction project · efiction11 Ara 2005

      • CVE-2005-4174
        31İzleyin

        eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessi

        YüksekCVSS 7,5İstismar yokEPSS %1

        efiction project · efiction11 Ara 2005

      • CVE-2005-4172
        21İzleyin

        eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments,

        OrtaCVSS 5,0İstismar yokEPSS %1

        efiction project · efiction11 Ara 2005

      • CVE-2005-4173
        21İzleyin

        eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo

        OrtaCVSS 5,0İstismar yokEPSS %1

        efiction project · efiction11 Ara 2005

      • CVE-2005-4167
        18İzleyin

        Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let

        OrtaCVSS 4,3Kavram kanıtıEPSS %3

        efiction project · efiction11 Ara 2005