eticket kayıtları
eticket üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2008-5165İstismar yok | Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1eticket · eticket · CWE-89 | Yüksek7,5 | — | %1,3 | 19 Kas 2008 |
30İzleyin | CVE-2008-0267Kavram kanıtı | Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) staeticket · eticket · CWE-89 | Yüksek7,5 | — | %1,2 | 15 Oca 2008 |
20İzleyin | CVE-2007-2800İstismar yok | index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[eticket · eticket | Orta5,0 | — | %1,3 | 28 Haz 2007 |
18İzleyin | CVE-2007-2801Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remoteeticket · eticket · CWE-79 | Orta4,3 | — | %2,4 | 29 Haz 2007 |
18İzleyin | CVE-2008-0552Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML vieticket · eticket · CWE-79 | Orta4,3 | — | %1,9 | 1 Şub 2008 |
17İzleyin | CVE-2008-0268Kavram kanıtı | Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via teticket · eticket · CWE-79 | Orta4,3 | — | %1,5 | 15 Oca 2008 |
17İzleyin | CVE-2008-0093İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to ineticket · eticket · CWE-79 | Orta4,3 | — | %1,1 | 7 Oca 2008 |
10İzleyin | CVE-2008-0266Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative passworeticket · eticket · CWE-352 | Düşük2,6 | — | %0,4 | 15 Oca 2008 |
- CVE-2008-516530İzleyin
Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1
YüksekCVSS 7,5İstismar yokEPSS %1eticket · eticket19 Kas 2008
- CVE-2008-026730İzleyin
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sta
YüksekCVSS 7,5Kavram kanıtıEPSS %1eticket · eticket15 Oca 2008
- CVE-2007-280020İzleyin
index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[
OrtaCVSS 5,0İstismar yokEPSS %1eticket · eticket28 Haz 2007
- CVE-2007-280118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote
OrtaCVSS 4,3Kavram kanıtıEPSS %2eticket · eticket29 Haz 2007
- CVE-2008-055218İzleyin
Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3Kavram kanıtıEPSS %2eticket · eticket1 Şub 2008
- CVE-2008-026817İzleyin
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via t
OrtaCVSS 4,3Kavram kanıtıEPSS %2eticket · eticket15 Oca 2008
- CVE-2008-009317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to in
OrtaCVSS 4,3İstismar yokEPSS %1eticket · eticket7 Oca 2008
- CVE-2008-026610İzleyin
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative passwor
DüşükCVSS 2,6Kavram kanıtıEPSS %0eticket · eticket15 Oca 2008