idevspot kayıtları
idevspot üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2006-4741Kavram kanıtı | PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary coidevspot · phplinkexchange | Yüksek7,5 | — | %4,2 | 13 Eyl 2006 |
31İzleyin | CVE-2006-3776Kavram kanıtı | PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to exidevspot · autohost · CWE-94 | Yüksek7,5 | — | %3,2 | 24 Tem 2006 |
31İzleyin | CVE-2006-3777Kavram kanıtı | PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code videvspot · phplinkexchange · CWE-94 | Yüksek7,5 | — | %3,2 | 24 Tem 2006 |
31İzleyin | CVE-2006-4895İstismar yok | IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.idevspot · nixieaffiliate | Yüksek7,5 | — | %2,6 | 19 Eyl 2006 |
31İzleyin | CVE-2010-2319Kavram kanıtı | SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page paridevspot · textads · CWE-89 | Yüksek7,5 | — | %2,0 | 17 Haz 2010 |
31İzleyin | CVE-2007-4094İstismar yok | PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP codidevspot · phphostbot | Yüksek7,5 | — | %1,6 | 30 Tem 2007 |
30İzleyin | CVE-2005-4616İstismar yok | SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file paridevspot · isupport | Yüksek7,5 | — | %1,3 | 31 Ara 2005 |
28İzleyin | CVE-2007-4231Kavram kanıtı | PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitridevspot · phphostbot | Orta6,8 | — | %3,5 | 8 Ağu 2007 |
28İzleyin | CVE-2007-6539Kavram kanıtı | PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_idevspot · isupport · CWE-94 | Orta6,8 | — | %2,1 | 27 Ara 2007 |
27İzleyin | CVE-2012-5326Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentidevspot · isupport · CWE-352 | Orta6,8 | — | %0,9 | 8 Eki 2012 |
21İzleyin | CVE-2009-4434Kavram kanıtı | Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a ..idevspot · isupport · CWE-22 | Orta5,0 | — | %2,7 | 28 Ara 2009 |
20İzleyin | CVE-2011-3779İstismar yok | PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pidevspot · phphostbot · CWE-200 | Orta5,0 | — | %1,2 | 23 Eyl 2011 |
18İzleyin | CVE-2006-4894Kavram kanıtı | Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to injidevspot · nixieaffiliate | Orta4,3 | — | %4,0 | 19 Eyl 2006 |
18İzleyin | CVE-2006-4884Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML videvspot · isupport | Orta4,3 | — | %3,0 | 19 Eyl 2006 |
18İzleyin | CVE-2009-4433Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web scriidevspot · isupport · CWE-79 | Orta4,3 | — | %2,2 | 28 Ara 2009 |
18İzleyin | CVE-2006-4883İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML videvspot · bizdirectory | Orta4,3 | — | %2,0 | 19 Eyl 2006 |
18İzleyin | CVE-2006-4747Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1idevspot · textads | Orta4,3 | — | %1,7 | 13 Eyl 2006 |
18İzleyin | CVE-2006-4742Kavram kanıtı | Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web scridevspot · phplinkexchange | Orta4,3 | — | %1,7 | 13 Eyl 2006 |
17İzleyin | CVE-2008-3679Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitraryidevspot · phplinkexchange · CWE-79 | Orta4,3 | — | %1,4 | 14 Ağu 2008 |
17İzleyin | CVE-2012-1779İstismar yok | Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTidevspot · idev-businessdirectory · CWE-79 | Orta4,3 | — | %1,1 | 19 Mar 2012 |
17İzleyin | CVE-2009-4425İstismar yok | Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via thidevspot · idevcart · CWE-79 | Orta4,3 | — | %1,1 | 28 Ara 2009 |
- CVE-2006-474131İzleyin
PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary co
YüksekCVSS 7,5Kavram kanıtıEPSS %4idevspot · phplinkexchange13 Eyl 2006
- CVE-2006-377631İzleyin
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows remote attackers to ex
YüksekCVSS 7,5Kavram kanıtıEPSS %3idevspot · autohost24 Tem 2006
- CVE-2006-377731İzleyin
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code v
YüksekCVSS 7,5Kavram kanıtıEPSS %3idevspot · phplinkexchange24 Tem 2006
- CVE-2006-489531İzleyin
IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
YüksekCVSS 7,5İstismar yokEPSS %2idevspot · nixieaffiliate19 Eyl 2006
- CVE-2010-231931İzleyin
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page par
YüksekCVSS 7,5Kavram kanıtıEPSS %2idevspot · textads17 Haz 2010
- CVE-2007-409431İzleyin
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP cod
YüksekCVSS 7,5İstismar yokEPSS %1idevspot · phphostbot30 Tem 2007
- CVE-2005-461630İzleyin
SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file par
YüksekCVSS 7,5İstismar yokEPSS %1idevspot · isupport31 Ara 2005
- CVE-2007-423128İzleyin
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitr
OrtaCVSS 6,8Kavram kanıtıEPSS %3idevspot · phphostbot8 Ağu 2007
- CVE-2007-653928İzleyin
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include_
OrtaCVSS 6,8Kavram kanıtıEPSS %2idevspot · isupport27 Ara 2007
- CVE-2012-532627İzleyin
Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authent
OrtaCVSS 6,8Kavram kanıtıEPSS %0idevspot · isupport8 Eki 2012
- CVE-2009-443421İzleyin
Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %2idevspot · isupport28 Ara 2009
- CVE-2011-377920İzleyin
PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation p
OrtaCVSS 5,0İstismar yokEPSS %1idevspot · phphostbot23 Eyl 2011
- CVE-2006-489418İzleyin
Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inj
OrtaCVSS 4,3Kavram kanıtıEPSS %4idevspot · nixieaffiliate19 Eyl 2006
- CVE-2006-488418İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 4,3Kavram kanıtıEPSS %3idevspot · isupport19 Eyl 2006
- CVE-2009-443318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web scri
OrtaCVSS 4,3Kavram kanıtıEPSS %2idevspot · isupport28 Ara 2009
- CVE-2006-488318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML v
OrtaCVSS 4,3İstismar yokEPSS %2idevspot · bizdirectory19 Eyl 2006
- CVE-2006-474718İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1
OrtaCVSS 4,3Kavram kanıtıEPSS %1idevspot · textads13 Eyl 2006
- CVE-2006-474218İzleyin
Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web scr
OrtaCVSS 4,3Kavram kanıtıEPSS %1idevspot · phplinkexchange13 Eyl 2006
- CVE-2008-367917İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary
OrtaCVSS 4,3Kavram kanıtıEPSS %1idevspot · phplinkexchange14 Ağu 2008
- CVE-2012-177917İzleyin
Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HT
OrtaCVSS 4,3İstismar yokEPSS %1idevspot · idev-businessdirectory19 Mar 2012
- CVE-2009-442517İzleyin
Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via th
OrtaCVSS 4,3İstismar yokEPSS %1idevspot · idevcart28 Ara 2009