htmlpurifier kayıtları
htmlpurifier üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
20İzleyin | CVE-2011-3744İstismar yok | HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installathtmlpurifier · html purifier · CWE-200 | Orta5,0 | — | %1,4 | 23 Eyl 2011 |
18İzleyin | CVE-2010-2479İstismar yok | Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet Emahara · mahara · CWE-79 | Orta4,3 | — | %2,0 | 6 Tem 2010 |
17İzleyin | CVE-2007-3498İstismar yok | Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrhtmlpurifier · htmlpurifier | Orta4,3 | — | %1,0 | 29 Haz 2007 |
17İzleyin | CVE-2010-4183İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers tohtmlpurifier · htmlpurifier · CWE-79 | Orta4,3 | — | %0,9 | 5 Kas 2010 |
- CVE-2011-374420İzleyin
HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installat
OrtaCVSS 5,0İstismar yokEPSS %1htmlpurifier · html purifier23 Eyl 2011
- CVE-2010-247918İzleyin
Cross-site scripting (XSS) vulnerability in HTML Purifier before 4.1.1, as used in Mahara and other products, when the browser is Internet E
OrtaCVSS 4,3İstismar yokEPSS %2mahara · mahara6 Tem 2010
- CVE-2007-349817İzleyin
Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitr
OrtaCVSS 4,3İstismar yokEPSS %1htmlpurifier · htmlpurifier29 Haz 2007
- CVE-2010-418317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to
OrtaCVSS 4,3İstismar yokEPSS %1htmlpurifier · htmlpurifier5 Kas 2010