ilch kayıtları
ilch üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2019-17046İstismar yok | Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.ilch · ilch cms · CWE-434 | Yüksek7,2 | — | %4,4 | 30 Eyl 2019 |
27İzleyin | CVE-2015-2083İstismar yok | Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requeilch · cms · CWE-352 | Orta6,8 | — | %0,6 | 25 Şub 2015 |
24İzleyin | CVE-2019-20523İstismar yok | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.ilch · ilch cms · CWE-79 | Orta6,1 | — | %0,7 | 19 Mar 2020 |
24İzleyin | CVE-2019-20524İstismar yok | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.ilch · ilch cms · CWE-79 | Orta6,1 | — | %0,7 | 19 Mar 2020 |
24İzleyin | CVE-2019-20522İstismar yok | ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.ilch · ilch cms · CWE-79 | Orta6,1 | — | %0,7 | 19 Mar 2020 |
21İzleyin | CVE-2021-27352İstismar yok | An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.ilch · ilch cms · CWE-601 | Orta5,4 | — | %0,8 | 29 Mar 2021 |
19İzleyin | CVE-2019-17045İstismar yok | Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.ilch · ilch cms · CWE-79 | Orta4,8 | — | %0,7 | 30 Eyl 2019 |
18İzleyin | CVE-2014-1944Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the ilch · ilch cms · CWE-79 | Orta4,3 | — | %3,3 | 9 Mar 2014 |
- CVE-2019-1704629İzleyin
Ilch 2.1.22 allows remote code execution because php is listed under "Allowed files" on the index.php/admin/media/settings/index page.
YüksekCVSS 7,2İstismar yokEPSS %4ilch · ilch cms30 Eyl 2019
- CVE-2015-208327İzleyin
Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for reque
OrtaCVSS 6,8İstismar yokEPSS %1ilch · cms25 Şub 2015
- CVE-2019-2052324İzleyin
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
OrtaCVSS 6,1İstismar yokEPSS %1ilch · ilch cms19 Mar 2020
- CVE-2019-2052424İzleyin
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
OrtaCVSS 6,1İstismar yokEPSS %1ilch · ilch cms19 Mar 2020
- CVE-2019-2052224İzleyin
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
OrtaCVSS 6,1İstismar yokEPSS %1ilch · ilch cms19 Mar 2020
- CVE-2021-2735221İzleyin
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
OrtaCVSS 5,4İstismar yokEPSS %1ilch · ilch cms29 Mar 2021
- CVE-2019-1704519İzleyin
Ilch 2.1.22 allows stored XSS via the title, text, or email id to the Jobs Tab.
OrtaCVSS 4,8İstismar yokEPSS %1ilch · ilch cms30 Eyl 2019
- CVE-2014-194418İzleyin
Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3Kavram kanıtıEPSS %3ilch · ilch cms9 Mar 2014