headstart solutions kayıtları
headstart solutions üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Saldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2006-6973İstismar yok | Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, whiheadstart solutions · deskpro | Yüksek7,5 | — | %1,4 | 7 Şub 2007 |
30İzleyin | CVE-2006-6974İstismar yok | Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers headstart solutions · deskpro | Yüksek7,5 | — | %1,3 | 7 Şub 2007 |
20İzleyin | CVE-2006-7000İstismar yok | Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, (2) includes/init.phpheadstart solutions · deskpro | Orta5,0 | — | %1,1 | 12 Şub 2007 |
20İzleyin | CVE-2006-6998İstismar yok | install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERY_STRheadstart solutions · deskpro · CWE-200 | Orta5,0 | — | %1,1 | 12 Şub 2007 |
17İzleyin | CVE-2006-6999İstismar yok | attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified headstart solutions · deskpro · CWE-200 | Orta4,3 | — | %1,0 | 12 Şub 2007 |
14İzleyin | CVE-2007-4413İstismar yok | Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users theadstart solutions · deskpro | Düşük3,5 | — | %0,8 | 18 Ağu 2007 |
14İzleyin | CVE-2007-4412İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrarheadstart solutions · deskpro | Düşük3,5 | — | %0,8 | 18 Ağu 2007 |
- CVE-2006-697330İzleyin
Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, whi
YüksekCVSS 7,5İstismar yokEPSS %1headstart solutions · deskpro7 Şub 2007
- CVE-2006-697430İzleyin
Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers
YüksekCVSS 7,5İstismar yokEPSS %1headstart solutions · deskpro7 Şub 2007
- CVE-2006-700020İzleyin
Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, (2) includes/init.php
OrtaCVSS 5,0İstismar yokEPSS %1headstart solutions · deskpro12 Şub 2007
- CVE-2006-699820İzleyin
install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERY_STR
OrtaCVSS 5,0İstismar yokEPSS %1headstart solutions · deskpro12 Şub 2007
- CVE-2006-699917İzleyin
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified
OrtaCVSS 4,3İstismar yokEPSS %1headstart solutions · deskpro12 Şub 2007
- CVE-2007-441314İzleyin
Direct static code injection vulnerability in admincp/user_help.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users t
DüşükCVSS 3,5İstismar yokEPSS %0headstart solutions · deskpro18 Ağu 2007
- CVE-2007-441214İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrar
DüşükCVSS 3,5İstismar yokEPSS %0headstart solutions · deskpro18 Ağu 2007