gallarific kayıtları
gallarific üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-287 Improper Authentication2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-1327Kavram kanıtı | Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a digallarific · gallarific · CWE-287 | Yüksek7,5 | — | %3,1 | 13 Mar 2008 |
30İzleyin | CVE-2008-1464İstismar yok | Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) qgallarific · gallarific · CWE-89 | Yüksek7,5 | — | %1,0 | 24 Mar 2008 |
30İzleyin | CVE-2011-0519Kavram kanıtı | SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers togallarific · php photo gallery script · CWE-89 | Yüksek7,5 | — | %0,9 | 20 Oca 2011 |
25İzleyin | CVE-2008-1469İstismar yok | Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allogallarific · gallarific · CWE-287 | Orta6,4 | — | %1,2 | 24 Mar 2008 |
17İzleyin | CVE-2008-1326Kavram kanıtı | Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the gallarific · gallarific · CWE-79 | Orta4,3 | — | %1,5 | 13 Mar 2008 |
17İzleyin | CVE-2008-6567İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTMLgallarific · gallarific · CWE-79 | Orta4,3 | — | %1,1 | 31 Mar 2009 |
- CVE-2008-132731İzleyin
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a di
YüksekCVSS 7,5Kavram kanıtıEPSS %3gallarific · gallarific13 Mar 2008
- CVE-2008-146430İzleyin
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) q
YüksekCVSS 7,5İstismar yokEPSS %1gallarific · gallarific24 Mar 2008
- CVE-2011-051930İzleyin
SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to
YüksekCVSS 7,5Kavram kanıtıEPSS %1gallarific · php photo gallery script20 Oca 2011
- CVE-2008-146925İzleyin
Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allo
OrtaCVSS 6,4İstismar yokEPSS %1gallarific · gallarific24 Mar 2008
- CVE-2008-132617İzleyin
Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3Kavram kanıtıEPSS %1gallarific · gallarific13 Mar 2008
- CVE-2008-656717İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %1gallarific · gallarific31 Mar 2009