İçeriğe atla
Noroxi

eqdkp kayıtları

eqdkp üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    9 kayıt
    • CVE-2007-0760
      31İzleyin

      EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allow

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      eqdkp · eqdkp5 Şub 2007

    • CVE-2005-2615
      30İzleyin

      Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id.

      YüksekCVSS 7,5İstismar yokEPSS %1

      eqdkp · eqdkp17 Ağu 2005

    • CVE-2007-3077
      30İzleyin

      SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      eqdkp · eqdkp6 Haz 2007

    • CVE-2008-2222
      30İzleyin

      SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user_id paramet

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      eqdkp · eqdkp14 May 2008

    • CVE-2007-2716
      28İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTM

      OrtaCVSS 6,8Kavram kanıtıEPSS %4

      eqdkp · eqdkp16 May 2007

    • CVE-2007-3079
      28İzleyin

      listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which

      YüksekCVSS 7,1İstismar yokEPSS %1

      eqdkp · eqdkp6 Haz 2007

    • CVE-2006-2256
      27İzleyin

      PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP cod

      OrtaCVSS 6,4Kavram kanıtıEPSS %7

      eqdkp · eqdkp9 May 2006

    • CVE-2007-4176
      27İzleyin

      Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.

      OrtaCVSS 6,8İstismar yokEPSS %1

      eqdkp · eqdkp plus7 Ağu 2007

    • CVE-2007-3067
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inje

      OrtaCVSS 4,3İstismar yokEPSS %1

      eqdkp · attunement and key5 Haz 2007