Fengoffice kayıtları
fengoffice üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-9623Kavram kanıtı | Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php.fengoffice · feng office · CWE-434 | Kritik9,8 | — | %8,1 | 7 Mar 2019 |
21İzleyin | CVE-2024-6039Kavram kanıtı | Feng Office Workspaces sql injectionfengoffice · feng office · CWE-89 | Orta5,3 | — | %0,7 | 16 Haz 2024 |
20İzleyin | CVE-2011-3738İstismar yok | Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatiofengoffice · feng office · CWE-200 | Orta5,0 | — | %1,3 | 23 Eyl 2011 |
18İzleyin | CVE-2014-5343İstismar yok | Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name fiefengoffice · feng office · CWE-79 | Orta4,3 | — | %1,9 | 19 Ağu 2014 |
17İzleyin | CVE-2013-5744İstismar yok | Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML fengoffice · feng office · CWE-79 | Orta4,3 | — | %1,0 | 28 Eki 2013 |
8İzleyin | CVE-2025-5877İstismar yok | Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity referencefengoffice · feng office · CWE-610 | Düşük2,1 | — | %0,4 | 9 Haz 2025 |
- CVE-2019-962341Planlayın
Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php.
KritikCVSS 9,8Kavram kanıtıEPSS %8fengoffice · feng office7 Mar 2019
- CVE-2024-603921İzleyin
Feng Office Workspaces sql injection
OrtaCVSS 5,3Kavram kanıtıEPSS %1fengoffice · feng office16 Haz 2024
- CVE-2011-373820İzleyin
Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
OrtaCVSS 5,0İstismar yokEPSS %1fengoffice · feng office23 Eyl 2011
- CVE-2014-534318İzleyin
Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name fie
OrtaCVSS 4,3İstismar yokEPSS %2fengoffice · feng office19 Ağu 2014
- CVE-2013-574417İzleyin
Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %1fengoffice · feng office28 Eki 2013
- CVE-2025-58778İzleyin
Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference
DüşükCVSS 2,1İstismar yokEPSS %0fengoffice · feng office9 Haz 2025