grayscale kayıtları
grayscale üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2007-1432Kavram kanıtı | Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments grayscale · grayscale blog | Yüksek7,5 | — | %2,3 | 13 Mar 2007 |
30İzleyin | CVE-2006-4984İstismar yok | Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL grayscale · bandsite cms | Yüksek7,5 | — | %1,6 | 25 Eyl 2006 |
30İzleyin | CVE-2007-1434Kavram kanıtı | SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL cograyscale · grayscale blog | Yüksek7,5 | — | %1,0 | 13 Mar 2007 |
24İzleyin | CVE-2006-3193Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackersgrayscale · bandsite cms · CWE-94 | Orta5,1 | — | %14,8 | 22 Haz 2006 |
20İzleyin | CVE-2006-4986İstismar yok | Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/cograyscale · bandsite cms | Orta5,0 | — | %1,5 | 25 Eyl 2006 |
18İzleyin | CVE-2006-4985Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML grayscale · bandsite cms · CWE-79 | Orta4,3 | — | %1,7 | 25 Eyl 2006 |
17İzleyin | CVE-2007-1433Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrarygrayscale · grayscale blog | Orta4,3 | — | %1,5 | 13 Mar 2007 |
- CVE-2007-143231İzleyin
Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments
YüksekCVSS 7,5Kavram kanıtıEPSS %2grayscale · grayscale blog13 Mar 2007
- CVE-2006-498430İzleyin
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL
YüksekCVSS 7,5İstismar yokEPSS %2grayscale · bandsite cms25 Eyl 2006
- CVE-2007-143430İzleyin
SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL co
YüksekCVSS 7,5Kavram kanıtıEPSS %1grayscale · grayscale blog13 Mar 2007
- CVE-2006-319324İzleyin
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers
OrtaCVSS 5,1Kavram kanıtıEPSS %15grayscale · bandsite cms22 Haz 2006
- CVE-2006-498620İzleyin
Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/co
OrtaCVSS 5,0İstismar yokEPSS %1grayscale · bandsite cms25 Eyl 2006
- CVE-2006-498518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %2grayscale · bandsite cms25 Eyl 2006
- CVE-2007-143317İzleyin
Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary
OrtaCVSS 4,3Kavram kanıtıEPSS %1grayscale · grayscale blog13 Mar 2007