Goautodial kayıtları
goautodial üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %33,3
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-23 Relative Path Traversal1
- CWE-305 Authentication Bypass by Primary Weakness1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2015-2845Silahlaştırılmış | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via goautodial · goadmin ce · CWE-78 | Kritik10,0 | — | %71,5 | 12 May 2015 |
44Planlayın | CVE-2015-2842Kavram kanıtı | Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.goautodial · goadmin ce | Kritik10,0 | — | %13,0 | 12 May 2015 |
44Planlayın | CVE-2015-2844Kavram kanıtı | The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via goautodial · goadmin ce · CWE-78 | Kritik10,0 | — | %12,6 | 12 May 2015 |
41Planlayın | CVE-2015-2843Silahlaştırılmış | Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commangoautodial · goadmin ce · CWE-89 | Yüksek7,5 | — | %37,9 | 12 May 2015 |
35İzleyin | CVE-2021-43176İstismar yok | The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extengoautodial · goautodial · CWE-23 | Yüksek8,8 | — | %1,3 | 7 Ara 2021 |
30İzleyin | CVE-2021-43175İstismar yok | The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action thgoautodial · goautodial · CWE-305 | Yüksek7,5 | — | %1,1 | 7 Ara 2021 |
- CVE-2015-284561Bu hafta
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via
KritikCVSS 10,0SilahlaştırılmışEPSS %71goautodial · goadmin ce12 May 2015
- CVE-2015-284244Planlayın
Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.
KritikCVSS 10,0Kavram kanıtıEPSS %13goautodial · goadmin ce12 May 2015
- CVE-2015-284444Planlayın
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via
KritikCVSS 10,0Kavram kanıtıEPSS %12goautodial · goadmin ce12 May 2015
- CVE-2015-284341Planlayın
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL comman
YüksekCVSS 7,5SilahlaştırılmışEPSS %37goautodial · goadmin ce12 May 2015
- CVE-2021-4317635İzleyin
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file exten
YüksekCVSS 8,8İstismar yokEPSS %1goautodial · goautodial7 Ara 2021
- CVE-2021-4317530İzleyin
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action th
YüksekCVSS 7,5İstismar yokEPSS %1goautodial · goautodial7 Ara 2021