ionizecms kayıtları
ionizecms üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2022-26272İstismar yok | A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to thionizecms · ionize | Kritik9,8 | — | %22,4 | 24 Mar 2022 |
44Planlayın | CVE-2022-29307İstismar yok | IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/langionizecms · ionize · CWE-94 | Kritik9,8 | — | %18,2 | 12 May 2022 |
39İzleyin | CVE-2022-29306İstismar yok | IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.phpionizecms · ionize · CWE-89 | Kritik9,8 | — | %1,1 | 12 May 2022 |
24İzleyin | CVE-2017-5961İstismar yok | An issue was discovered in ionize through 1.0.8.ionizecms · ionize · CWE-79 | Orta6,1 | — | %0,9 | 12 Şub 2017 |
- CVE-2022-2627246Planlayın
A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to th
KritikCVSS 9,8İstismar yokEPSS %22ionizecms · ionize24 Mar 2022
- CVE-2022-2930744Planlayın
IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang
KritikCVSS 9,8İstismar yokEPSS %18ionizecms · ionize12 May 2022
- CVE-2022-2930639İzleyin
IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php
KritikCVSS 9,8İstismar yokEPSS %1ionizecms · ionize12 May 2022
- CVE-2017-596124İzleyin
An issue was discovered in ionize through 1.0.8.
OrtaCVSS 6,1İstismar yokEPSS %0ionizecms · ionize12 Şub 2017