john lim kayıtları
john lim üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2006-0146Kavram kanıtı | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Camantis · mantis · CWE-89 | Yüksek7,5 | — | %13,2 | 9 Oca 2006 |
34İzleyin | CVE-2006-0147Kavram kanıtı | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (john lim · adodb | Yüksek7,5 | — | %13,0 | 9 Oca 2006 |
21İzleyin | CVE-2006-0410İstismar yok | SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspejohn lim · adodb | Orta5,0 | — | %2,9 | 24 Oca 2006 |
21İzleyin | CVE-2006-4618İstismar yok | PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-linjohn lim · adodb | Orta5,1 | — | %1,7 | 6 Eyl 2006 |
20İzleyin | CVE-2006-4976İstismar yok | The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) servjohn lim · adodb date library | Orta5,0 | — | %1,4 | 24 Eyl 2006 |
20İzleyin | CVE-2011-3699İstismar yok | John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveajohn lim · adodb · CWE-200 | Orta5,0 | — | %1,3 | 23 Eyl 2011 |
20İzleyin | CVE-2004-2664İstismar yok | John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts thjohn lim · adodb | Orta5,0 | — | %1,1 | 31 Ara 2004 |
19İzleyin | CVE-2006-0806Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to injohn lim · adodb · CWE-79 | Orta4,3 | — | %6,0 | 20 Şub 2006 |
- CVE-2006-014634İzleyin
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca
YüksekCVSS 7,5Kavram kanıtıEPSS %13mantis · mantis9 Oca 2006
- CVE-2006-014734İzleyin
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (
YüksekCVSS 7,5Kavram kanıtıEPSS %13john lim · adodb9 Oca 2006
- CVE-2006-041021İzleyin
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspe
OrtaCVSS 5,0İstismar yokEPSS %2john lim · adodb24 Oca 2006
- CVE-2006-461821İzleyin
PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-lin
OrtaCVSS 5,1İstismar yokEPSS %1john lim · adodb6 Eyl 2006
- CVE-2006-497620İzleyin
The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) serv
OrtaCVSS 5,0İstismar yokEPSS %1john lim · adodb date library24 Eyl 2006
- CVE-2011-369920İzleyin
John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which revea
OrtaCVSS 5,0İstismar yokEPSS %1john lim · adodb23 Eyl 2011
- CVE-2004-266420İzleyin
John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts th
OrtaCVSS 5,0İstismar yokEPSS %1john lim · adodb31 Ara 2004
- CVE-2006-080619İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to in
OrtaCVSS 4,3Kavram kanıtıEPSS %6john lim · adodb20 Şub 2006