InstantCMS kayıtları

instantcms üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 1 · %4,5
Pre-auth RCE: 1
Düzeltme kaydı olan: %9,1
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
38İzleyin	CVE-2013-10051Silahlaştırılmış	InstantCMS <= 1.6 Remote PHP Code Executioninstantcms · instantcms · CWE-95 pre-auth RCE	Kritik9,3	—	%2,8	1 Ağu 2025
36İzleyin	CVE-2023-4188İstismar yok	SQL Injection in instantsoft/icms2instantcms · instantcms · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,1	—	%0,9	5 Ağu 2023
28İzleyin	CVE-2023-4928İstismar yok	SQL Injection in instantsoft/icms2instantcms · icms2 · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,9	12 Eyl 2023
28İzleyin	CVE-2024-31212İstismar yok	SQL injection in index_chart_data actioninstantcms · instantcms · CWE-20 SQL enjeksiyonu	Yüksek7,2	—	%0,9	4 Nis 2024
28İzleyin	CVE-2025-59055İstismar yok	InstantCMS vulnerable to Server-Side Request Forgery via package installerinstantcms · instantcms · CWE-918 SSRF	Yüksek7,2	—	%0,5	11 Eyl 2025
28İzleyin	CVE-2026-28281İstismar yok	InstantCMS has Multiple CSRF Vulnerabilitiesinstantcms · instantcms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek7,1	—	%0,2	10 Mar 2026
24İzleyin	CVE-2018-14382İstismar yok	InstantCMS 2.10.1 has /redirect?url= XSS.instantcms · instantcms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	18 Tem 2018
24İzleyin	CVE-2023-4655İstismar yok	Cross-site Scripting (XSS) - Reflected in instantsoft/icms2instantcms · instantcms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	30 Ağu 2023
21İzleyin	CVE-2023-4652İstismar yok	Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantcms · instantcms · CWE-79 XSS	Orta5,4	—	%0,5	30 Ağu 2023
21İzleyin	CVE-2023-4649İstismar yok	Session Fixation in instantsoft/icms2instantcms · instantcms · CWE-384	Orta5,4	—	%0,4	30 Ağu 2023
21İzleyin	CVE-2023-4651İstismar yok	Server-Side Request Forgery (SSRF) in instantsoft/icms2instantcms · instantcms · CWE-918 SSRF	Orta5,4	—	%0,4	30 Ağu 2023
21İzleyin	CVE-2024-31213İstismar yok	InstantCMS Open Redirect vulnerabilityinstantcms · instantcms · CWE-601 Açık yönlendirme	Orta5,4	—	%0,4	5 Nis 2024
21İzleyin	CVE-2023-4878İstismar yok	Server-Side Request Forgery (SSRF) in instantsoft/icms2instantcms · instantcms · CWE-918 SSRF	Orta5,4	—	%0,4	10 Eyl 2023
21İzleyin	CVE-2024-50348İstismar yok	InstantCMS has a Cross Site Scripting Vulnerabilityinstantcms · instantcms · CWE-79 XSS	Orta5,4	—	%0,3	29 Eki 2024
19İzleyin	CVE-2023-4704İstismar yok	External Control of System or Configuration Setting in instantsoft/icms2instantcms · instantcms · CWE-15	Orta4,9	—	%0,9	1 Eyl 2023
19İzleyin	CVE-2023-4653İstismar yok	Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantcms · instantcms · CWE-79 XSS	Orta4,8	—	%0,5	30 Ağu 2023
19İzleyin	CVE-2023-4187İstismar yok	Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantcms · instantcms · CWE-79 XSS	Orta4,8	—	%0,5	5 Ağu 2023
19İzleyin	CVE-2023-4189İstismar yok	Cross-site Scripting (XSS) - Reflected in instantsoft/icms2instantcms · instantcms · CWE-79 XSS	Orta4,8	—	%0,5	5 Ağu 2023
19İzleyin	CVE-2023-4879İstismar yok	Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantcms · instantcms · CWE-79 XSS	Orta4,8	—	%0,4	10 Eyl 2023
18İzleyin	CVE-2023-4650İstismar yok	Improper Access Control in instantsoft/icms2instantcms · instantcms · CWE-284 Erişim denetimi (IDOR)	Orta4,7	—	%0,5	30 Ağu 2023
17İzleyin	CVE-2023-4381İstismar yok	Unverified Password Change in instantsoft/icms2instantcms · instantcms · CWE-620	Orta4,3	—	%0,4	16 Ağu 2023
14İzleyin	CVE-2023-4654İstismar yok	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2instantcms · instantcms · CWE-614	Düşük3,5	—	%0,3	30 Ağu 2023

CVE-2013-10051
38İzleyin
InstantCMS <= 1.6 Remote PHP Code Execution
KritikCVSS 9,3SilahlaştırılmışEPSS %3
- pre-auth RCE
instantcms · instantcms1 Ağu 2025
CVE-2023-4188
36İzleyin
SQL Injection in instantsoft/icms2
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
instantcms · instantcms5 Ağu 2023
CVE-2023-4928
28İzleyin
SQL Injection in instantsoft/icms2
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
instantcms · icms212 Eyl 2023
CVE-2024-31212
28İzleyin
SQL injection in index_chart_data action
YüksekCVSS 7,2İstismar yokEPSS %1
- SQL enjeksiyonu
instantcms · instantcms4 Nis 2024
CVE-2025-59055
28İzleyin
InstantCMS vulnerable to Server-Side Request Forgery via package installer
YüksekCVSS 7,2İstismar yokEPSS %0
- SSRF
instantcms · instantcms11 Eyl 2025
CVE-2026-28281
28İzleyin
InstantCMS has Multiple CSRF Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
instantcms · instantcms10 Mar 2026
CVE-2018-14382
24İzleyin
InstantCMS 2.10.1 has /redirect?url= XSS.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
instantcms · instantcms18 Tem 2018
CVE-2023-4655
24İzleyin
Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
instantcms · instantcms30 Ağu 2023
CVE-2023-4652
21İzleyin
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
instantcms · instantcms30 Ağu 2023
CVE-2023-4649
21İzleyin
Session Fixation in instantsoft/icms2
OrtaCVSS 5,4İstismar yokEPSS %0
instantcms · instantcms30 Ağu 2023
CVE-2023-4651
21İzleyin
Server-Side Request Forgery (SSRF) in instantsoft/icms2
OrtaCVSS 5,4İstismar yokEPSS %0
- SSRF
instantcms · instantcms30 Ağu 2023
CVE-2024-31213
21İzleyin
InstantCMS Open Redirect vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- Açık yönlendirme
instantcms · instantcms5 Nis 2024
CVE-2023-4878
21İzleyin
Server-Side Request Forgery (SSRF) in instantsoft/icms2
OrtaCVSS 5,4İstismar yokEPSS %0
- SSRF
instantcms · instantcms10 Eyl 2023
CVE-2024-50348
21İzleyin
InstantCMS has a Cross Site Scripting Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
instantcms · instantcms29 Eki 2024
CVE-2023-4704
19İzleyin
External Control of System or Configuration Setting in instantsoft/icms2
OrtaCVSS 4,9İstismar yokEPSS %1
instantcms · instantcms1 Eyl 2023
CVE-2023-4653
19İzleyin
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
instantcms · instantcms30 Ağu 2023
CVE-2023-4187
19İzleyin
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
instantcms · instantcms5 Ağu 2023
CVE-2023-4189
19İzleyin
Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
instantcms · instantcms5 Ağu 2023
CVE-2023-4879
19İzleyin
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
instantcms · instantcms10 Eyl 2023
CVE-2023-4650
18İzleyin
Improper Access Control in instantsoft/icms2
OrtaCVSS 4,7İstismar yokEPSS %1
- Erişim denetimi (IDOR)
instantcms · instantcms30 Ağu 2023
CVE-2023-4381
17İzleyin
Unverified Password Change in instantsoft/icms2
OrtaCVSS 4,3İstismar yokEPSS %0
instantcms · instantcms16 Ağu 2023
CVE-2023-4654
14İzleyin
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2
DüşükCVSS 3,5İstismar yokEPSS %0
instantcms · instantcms30 Ağu 2023