exceedone kayıtları

exceedone üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %28,6
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
CWE-732 Incorrect Permission Assignment for Critical Resource1
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-37333İstismar yok	SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7)exceedone · exment · CWE-89 RCE SQL enjeksiyonu	Yüksek8,8	—	%1,4	24 Ağu 2022
21İzleyin	CVE-2022-38080İstismar yok	Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and eaexceedone · exment · CWE-79 XSS	Orta5,4	—	%0,9	24 Ağu 2022
21İzleyin	CVE-2022-38089İstismar yok	Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earliexceedone · exment · CWE-79 XSS	Orta5,4	—	%0,9	24 Ağu 2022
21İzleyin	CVE-2020-5619İstismar yok	Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unexceedone · exment · CWE-79 XSS	Orta5,4	—	%0,7	24 Ağu 2020
21İzleyin	CVE-2020-5620İstismar yok	Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a exceedone · exment · CWE-79 XSS	Orta5,4	—	%0,6	24 Ağu 2020
21İzleyin	CVE-2024-47793İstismar yok	Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.exceedone · exment · CWE-79 XSS	Orta5,4	—	%0,3	18 Eki 2024
15İzleyin	CVE-2024-46897İstismar yok	Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.exceedone · exment · CWE-732	Düşük3,8	—	%0,4	18 Eki 2024

CVE-2022-37333
35İzleyin
SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7)
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- SQL enjeksiyonu
exceedone · exment24 Ağu 2022
CVE-2022-38080
21İzleyin
Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and ea
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
exceedone · exment24 Ağu 2022
CVE-2022-38089
21İzleyin
Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earli
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
exceedone · exment24 Ağu 2022
CVE-2020-5619
21İzleyin
Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via un
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
exceedone · exment24 Ağu 2020
CVE-2020-5620
21İzleyin
Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
exceedone · exment24 Ağu 2020
CVE-2024-47793
21İzleyin
Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
exceedone · exment18 Eki 2024
CVE-2024-46897
15İzleyin
Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier.
DüşükCVSS 3,8İstismar yokEPSS %0
exceedone · exment18 Eki 2024