İçeriğe atla
Noroxi

hoosk kayıtları

hoosk üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 22
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2020-26041
    40Planlayın

    An issue was discovered in Hoosk CmS v1.8.0.

    KritikCVSS 9,8İstismar yokEPSS %3

    hoosk · hoosk30 Eyl 2020

  • CVE-2018-16771
    40Planlayın

    Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.

    KritikCVSS 9,8İstismar yokEPSS %3

    hoosk · hoosk10 Eyl 2018

  • CVE-2020-26042
    39İzleyin

    An issue was discovered in Hoosk CMS v1.8.0.

    KritikCVSS 9,8İstismar yokEPSS %1

    hoosk · hoosk30 Eyl 2020

  • CVE-2022-43234
    39İzleyin

    An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted

    KritikCVSS 9,8İstismar yokEPSS %1

    hoosk · hoosk16 Kas 2022

  • CVE-2018-7590
    35İzleyin

    CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.

    YüksekCVSS 8,8İstismar yokEPSS %1

    hoosk · hoosk1 Mar 2018

  • CVE-2024-51055
    26İzleyin

    An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.

    OrtaCVSS 6,5İstismar yokEPSS %1

    hoosk · hoosk8 Kas 2024

  • CVE-2020-26043
    24İzleyin

    An issue was discovered in Hoosk CMS v1.8.0.

    OrtaCVSS 6,1İstismar yokEPSS %1

    hoosk · hoosk30 Eyl 2020

  • CVE-2022-28586
    24İzleyin

    XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some

    OrtaCVSS 6,1İstismar yokEPSS %1

    hoosk · hoosk25 Nis 2022

  • CVE-2025-25990
    24İzleyin

    Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php c

    OrtaCVSS 6,1İstismar yokEPSS %0

    hoosk · hoosk14 Şub 2025

  • CVE-2021-43478
    21İzleyin

    A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, w

    OrtaCVSS 5,4İstismar yokEPSS %1

    hoosk · hoosk31 Mar 2022

  • CVE-2025-25991
    20İzleyin

    SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /install/index.php componen

    OrtaCVSS 5,1İstismar yokEPSS %0

    hoosk · hoosk14 Şub 2025

  • CVE-2018-16772
    19İzleyin

    Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.

    OrtaCVSS 4,8İstismar yokEPSS %1

    hoosk · hoosk10 Eyl 2018

  • CVE-2025-25988
    19İzleyin

    Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the custom Link title paramet

    OrtaCVSS 4,8İstismar yokEPSS %0

    hoosk · hoosk14 Şub 2025

  • CVE-2020-16610
    17İzleyin

    Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF).

    OrtaCVSS 4,3İstismar yokEPSS %0

    hoosk · hoosk28 Ağu 2020