İçeriğe atla
Noroxi

exv2 kayıtları

exv2 üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    11 kayıt
    • CVE-2006-7079
      43Planlayın

      Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v

      KritikCVSS 9,8Kavram kanıtıEPSS %13

      exv2 · content management system2 Mar 2007

    • CVE-2007-1966
      36İzleyin

      Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cooki

      KritikCVSS 9,1İstismar yokEPSS %1

      exv2 · content management system11 Nis 2007

    • CVE-2008-1349
      30İzleyin

      SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      exv2 · bamagalerie17 Mar 2008

    • CVE-2006-5030
      30İzleyin

      SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      exv2 · content management system27 Eyl 2006

    • CVE-2008-1404
      27İzleyin

      SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitr

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      exv2 · exv220 Mar 2008

    • CVE-2008-1407
      27İzleyin

      SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrary SQL commands via t

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      exv2 · exv220 Mar 2008

    • CVE-2008-1406
      27İzleyin

      SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute arbitrary SQL comma

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      exv2 · exv220 Mar 2008

    • CVE-2006-7080
      18İzleyin

      Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files

      OrtaCVSS 4,3Kavram kanıtıEPSS %5

      exv2 · content management system2 Mar 2007

    • CVE-2010-4155
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (

      OrtaCVSS 4,3İstismar yokEPSS %1

      exv2 · exv23 Kas 2010

    • CVE-2007-4365
      17İzleyin

      Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a

      OrtaCVSS 4,3İstismar yokEPSS %1

      exv2 · content management system15 Ağu 2007

    • CVE-2007-1965
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or

      OrtaCVSS 4,3İstismar yokEPSS %1

      exv2 · content management system11 Nis 2007