idreamsoft kayıtları
idreamsoft üreticisine ait 30 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)9
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
30 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2019-7160İstismar yok | idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in executidreamsoft · icms · CWE-22 | Kritik9,8 | — | %3,4 | 29 Oca 2019 |
40Planlayın | CVE-2021-44978İstismar yok | iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.idreamsoft · icms · CWE-94 | Kritik9,8 | — | %2,2 | 4 Şub 2022 |
39İzleyin | CVE-2020-19142İstismar yok | iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.idreamsoft · icms · CWE-78 | Kritik9,8 | — | %1,6 | 10 Ara 2020 |
39İzleyin | CVE-2020-19527İstismar yok | iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.idreamsoft · icms · CWE-78 | Kritik9,8 | — | %1,6 | 10 Ara 2020 |
39İzleyin | CVE-2019-17552İstismar yok | An issue was discovered in idreamsoft iCMS v7.0.14.idreamsoft · icms · CWE-89 | Kritik9,8 | — | %1,1 | 14 Eki 2019 |
39İzleyin | CVE-2022-41496İstismar yok | iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.idreamsoft · icms · CWE-918 | Kritik9,8 | — | %1,0 | 13 Eki 2022 |
39İzleyin | CVE-2023-39806İstismar yok | iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.idreamsoft · icms · CWE-89 | Kritik9,8 | — | %0,6 | 10 Ağu 2023 |
39İzleyin | CVE-2023-39805İstismar yok | iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.idreamsoft · icms · CWE-89 | Kritik9,8 | — | %0,6 | 10 Ağu 2023 |
37İzleyin | CVE-2019-7234İstismar yok | An issue was discovered in idreamsoft iCMS 7.0.13.idreamsoft · icms · CWE-22 | Kritik9,1 | — | %2,2 | 30 Oca 2019 |
37İzleyin | CVE-2020-18070İstismar yok | Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()"idreamsoft · icms · CWE-22 | Kritik9,1 | — | %2,2 | 29 Nis 2021 |
35İzleyin | CVE-2018-16366İstismar yok | An issue was discovered in idreamsoft iCMS V7.0.10.idreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,6 | 2 Eyl 2018 |
35İzleyin | CVE-2018-16332İstismar yok | An issue was discovered in iCMS 7.0.9.idreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,6 | 1 Eyl 2018 |
35İzleyin | CVE-2018-16365İstismar yok | An issue was discovered in idreamsoft iCMS V7.0.10.idreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,6 | 2 Eyl 2018 |
35İzleyin | CVE-2020-21141İstismar yok | iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.idreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,6 | 12 Kas 2021 |
35İzleyin | CVE-2020-26641İstismar yok | A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scriptsidreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,5 | 28 May 2021 |
35İzleyin | CVE-2023-40953İstismar yok | icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).idreamsoft · icms · CWE-352 | Yüksek8,8 | — | %0,3 | 7 Eyl 2023 |
31İzleyin | CVE-2019-7235İstismar yok | An issue was discovered in idreamsoft iCMS 7.0.13.idreamsoft · icms · CWE-22 | Yüksek7,5 | — | %2,5 | 30 Oca 2019 |
31İzleyin | CVE-2019-7237İstismar yok | An issue was discovered in idreamsoft iCMS 7.0.13 on Windows.idreamsoft · icms · CWE-22 | Yüksek7,5 | — | %2,2 | 30 Oca 2019 |
31İzleyin | CVE-2019-7236İstismar yok | An issue was discovered in idreamsoft iCMS 7.0.13.idreamsoft · icms · CWE-22 | Yüksek7,5 | — | %2,2 | 30 Oca 2019 |
30İzleyin | CVE-2021-44977İstismar yok | In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.idreamsoft · icms · CWE-22 | Yüksek7,5 | — | %1,6 | 4 Şub 2022 |
30İzleyin | CVE-2019-17583İstismar yok | idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstidreamsoft · icms · CWE-770 | Yüksek7,5 | — | %1,3 | 14 Eki 2019 |
29İzleyin | CVE-2018-16320İstismar yok | idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.idreamsoft · icms · CWE-22 | Yüksek7,2 | — | %2,4 | 1 Eyl 2018 |
26İzleyin | CVE-2019-16677İstismar yok | An issue was discovered in idreamsoft iCMS V7.0.idreamsoft · icms · CWE-352 | Orta6,5 | — | %0,5 | 21 Eyl 2019 |
26İzleyin | CVE-2020-24739İstismar yok | A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account.idreamsoft · icms · CWE-352 | Orta6,5 | — | %0,4 | 10 Eyl 2020 |
24İzleyin | CVE-2018-13865İstismar yok | An issue was discovered in idreamsoft iCMS 7.0.9.idreamsoft · icms · CWE-79 | Orta6,1 | — | %1,0 | 10 Tem 2018 |
- CVE-2019-716040Planlayın
idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execut
KritikCVSS 9,8İstismar yokEPSS %3idreamsoft · icms29 Oca 2019
- CVE-2021-4497840Planlayın
iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.
KritikCVSS 9,8İstismar yokEPSS %2idreamsoft · icms4 Şub 2022
- CVE-2020-1914239İzleyin
iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
KritikCVSS 9,8İstismar yokEPSS %2idreamsoft · icms10 Ara 2020
- CVE-2020-1952739İzleyin
iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
KritikCVSS 9,8İstismar yokEPSS %2idreamsoft · icms10 Ara 2020
- CVE-2019-1755239İzleyin
An issue was discovered in idreamsoft iCMS v7.0.14.
KritikCVSS 9,8İstismar yokEPSS %1idreamsoft · icms14 Eki 2019
- CVE-2022-4149639İzleyin
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
KritikCVSS 9,8İstismar yokEPSS %1idreamsoft · icms13 Eki 2022
- CVE-2023-3980639İzleyin
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
KritikCVSS 9,8İstismar yokEPSS %1idreamsoft · icms10 Ağu 2023
- CVE-2023-3980539İzleyin
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
KritikCVSS 9,8İstismar yokEPSS %1idreamsoft · icms10 Ağu 2023
- CVE-2019-723437İzleyin
An issue was discovered in idreamsoft iCMS 7.0.13.
KritikCVSS 9,1İstismar yokEPSS %2idreamsoft · icms30 Oca 2019
- CVE-2020-1807037İzleyin
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()"
KritikCVSS 9,1İstismar yokEPSS %2idreamsoft · icms29 Nis 2021
- CVE-2018-1636635İzleyin
An issue was discovered in idreamsoft iCMS V7.0.10.
YüksekCVSS 8,8İstismar yokEPSS %1idreamsoft · icms2 Eyl 2018
- CVE-2018-1633235İzleyin
An issue was discovered in iCMS 7.0.9.
YüksekCVSS 8,8İstismar yokEPSS %1idreamsoft · icms1 Eyl 2018
- CVE-2018-1636535İzleyin
An issue was discovered in idreamsoft iCMS V7.0.10.
YüksekCVSS 8,8İstismar yokEPSS %1idreamsoft · icms2 Eyl 2018
- CVE-2020-2114135İzleyin
iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.
YüksekCVSS 8,8İstismar yokEPSS %1idreamsoft · icms12 Kas 2021
- CVE-2020-2664135İzleyin
A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts
YüksekCVSS 8,8İstismar yokEPSS %1idreamsoft · icms28 May 2021
- CVE-2023-4095335İzleyin
icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).
YüksekCVSS 8,8İstismar yokEPSS %0idreamsoft · icms7 Eyl 2023
- CVE-2019-723531İzleyin
An issue was discovered in idreamsoft iCMS 7.0.13.
YüksekCVSS 7,5İstismar yokEPSS %2idreamsoft · icms30 Oca 2019
- CVE-2019-723731İzleyin
An issue was discovered in idreamsoft iCMS 7.0.13 on Windows.
YüksekCVSS 7,5İstismar yokEPSS %2idreamsoft · icms30 Oca 2019
- CVE-2019-723631İzleyin
An issue was discovered in idreamsoft iCMS 7.0.13.
YüksekCVSS 7,5İstismar yokEPSS %2idreamsoft · icms30 Oca 2019
- CVE-2021-4497730İzleyin
In iCMS <=8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files.
YüksekCVSS 7,5İstismar yokEPSS %2idreamsoft · icms4 Şub 2022
- CVE-2019-1758330İzleyin
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonst
YüksekCVSS 7,5İstismar yokEPSS %1idreamsoft · icms14 Eki 2019
- CVE-2018-1632029İzleyin
idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.
YüksekCVSS 7,2İstismar yokEPSS %2idreamsoft · icms1 Eyl 2018
- CVE-2019-1667726İzleyin
An issue was discovered in idreamsoft iCMS V7.0.
OrtaCVSS 6,5İstismar yokEPSS %0idreamsoft · icms21 Eyl 2019
- CVE-2020-2473926İzleyin
A CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account.
OrtaCVSS 6,5İstismar yokEPSS %0idreamsoft · icms10 Eyl 2020
- CVE-2018-1386524İzleyin
An issue was discovered in idreamsoft iCMS 7.0.9.
OrtaCVSS 6,1İstismar yokEPSS %1idreamsoft · icms10 Tem 2018