Exrick kayıtları
exrick üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-24112Kavram kanıtı | xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.exrick · xmall · CWE-89 | Kritik9,8 | — | %3,3 | 5 Şub 2024 |
39İzleyin | CVE-2025-28399İstismar yok | An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controlexrick · xmall · CWE-269 | Kritik9,8 | — | %0,6 | 15 Nis 2025 |
39İzleyin | CVE-2025-45612İstismar yok | Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.exrick · xmall · CWE-284 | Kritik9,8 | — | %0,5 | 5 May 2025 |
32İzleyin | CVE-2023-36331İstismar yok | Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via maexrick · xmall · CWE-639 | Yüksek8,2 | — | %0,2 | 12 Oca 2026 |
24İzleyin | CVE-2021-43432İstismar yok | A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.exrick · xmall · CWE-79 | Orta6,1 | — | %0,8 | 7 Nis 2022 |
24İzleyin | CVE-2025-65540İstismar yok | Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-supplied data.exrick · xmall · CWE-79 | Orta6,1 | — | %0,2 | 29 Kas 2025 |
22İzleyin | CVE-2025-8525İstismar yok | Exrick xboot Spring Boot Admin/Spring Actuator information disclosureexrick · xboot · CWE-200 | Orta5,5 | — | %0,4 | 4 Ağu 2025 |
11İzleyin | CVE-2025-8528İstismar yok | Exrick xboot getMenuList sensitive information in a cookieexrick · xboot · CWE-312 | Düşük2,9 | — | %0,3 | 4 Ağu 2025 |
8İzleyin | CVE-2025-8526İstismar yok | Exrick xboot UploadController.java upload unrestricted uploadexrick · xboot · CWE-284 | Düşük2,1 | — | %0,3 | 4 Ağu 2025 |
8İzleyin | CVE-2025-8527İstismar yok | Exrick xboot Swagger SecurityController.java server-side request forgeryexrick · xboot · CWE-918 | Düşük2,1 | — | %0,3 | 4 Ağu 2025 |
- CVE-2024-2411240Planlayın
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %3exrick · xmall5 Şub 2024
- CVE-2025-2839939İzleyin
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Control
KritikCVSS 9,8İstismar yokEPSS %1exrick · xmall15 Nis 2025
- CVE-2025-4561239İzleyin
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
KritikCVSS 9,8İstismar yokEPSS %1exrick · xmall5 May 2025
- CVE-2023-3633132İzleyin
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via ma
YüksekCVSS 8,2İstismar yokEPSS %0exrick · xmall12 Oca 2026
- CVE-2021-4343224İzleyin
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.
OrtaCVSS 6,1İstismar yokEPSS %1exrick · xmall7 Nis 2022
- CVE-2025-6554024İzleyin
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-supplied data.
OrtaCVSS 6,1İstismar yokEPSS %0exrick · xmall29 Kas 2025
- CVE-2025-852522İzleyin
Exrick xboot Spring Boot Admin/Spring Actuator information disclosure
OrtaCVSS 5,5İstismar yokEPSS %0exrick · xboot4 Ağu 2025
- CVE-2025-852811İzleyin
Exrick xboot getMenuList sensitive information in a cookie
DüşükCVSS 2,9İstismar yokEPSS %0exrick · xboot4 Ağu 2025
- CVE-2025-85268İzleyin
Exrick xboot UploadController.java upload unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %0exrick · xboot4 Ağu 2025
- CVE-2025-85278İzleyin
Exrick xboot Swagger SecurityController.java server-side request forgery
DüşükCVSS 2,1İstismar yokEPSS %0exrick · xboot4 Ağu 2025