esoftpro kayıtları

esoftpro üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 4
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
30İzleyin	CVE-2010-4996Kavram kanıtı	SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands vesoftpro · online guestbook pro · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,0	1 Kas 2011
30İzleyin	CVE-2010-5001Kavram kanıtı	SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands viaesoftpro · online contact manager · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,0	1 Kas 2011
30İzleyin	CVE-2010-4999Kavram kanıtı	SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the esoftpro · online photo pro · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,0	1 Kas 2011
30İzleyin	CVE-2009-4935Kavram kanıtı	SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the displaesoftpro · online guestbook pro · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%0,9	12 Tem 2010
17İzleyin	CVE-2009-4926Kavram kanıtı	Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject aesoftpro · online contact manager · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,6	12 Tem 2010
17İzleyin	CVE-2009-2441Kavram kanıtı	Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script esoftpro · online guestbook pro · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,5	13 Tem 2009
17İzleyin	CVE-2009-4934Kavram kanıtı	Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTMLesoftpro · online photo pro · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,5	12 Tem 2010
17İzleyin	CVE-2009-2447İstismar yok	Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary wesoftpro · online guestbook pro · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%0,9	13 Tem 2009
17İzleyin	CVE-2009-2448İstismar yok	Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script esoftpro · online guestbook pro · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%0,9	13 Tem 2009

CVE-2010-4996
30İzleyin
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands v
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
esoftpro · online guestbook pro1 Kas 2011
CVE-2010-5001
30İzleyin
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
esoftpro · online contact manager1 Kas 2011
CVE-2010-4999
30İzleyin
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
esoftpro · online photo pro1 Kas 2011
CVE-2009-4935
30İzleyin
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the displa
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
esoftpro · online guestbook pro12 Tem 2010
CVE-2009-4926
17İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote attackers to inject a
OrtaCVSS 4,3Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
esoftpro · online contact manager12 Tem 2010
CVE-2009-2441
17İzleyin
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
esoftpro · online guestbook pro13 Tem 2009
CVE-2009-4934
17İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
esoftpro · online photo pro12 Tem 2010
CVE-2009-2447
17İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary w
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
esoftpro · online guestbook pro13 Tem 2009
CVE-2009-2448
17İzleyin
Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
esoftpro · online guestbook pro13 Tem 2009