joomlaworks kayıtları
joomlaworks üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %8,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
47Planlayın | CVE-2019-19576Kavram kanıtı | class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omverot project · verot · CWE-434 | Kritik9,8 | — | %26,3 | 4 Ara 2019 |
40Planlayın | CVE-2019-19634Kavram kanıtı | class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, verot project · verot · CWE-434 | Kritik9,8 | — | %4,1 | 17 Ara 2019 |
31İzleyin | CVE-2009-2395Kavram kanıtı | SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQLjoomla · joomla\! · CWE-89 | Yüksek7,5 | — | %3,0 | 9 Tem 2009 |
31İzleyin | CVE-2018-7482İstismar yok | The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files, joomlaworks · k2 · CWE-22 | Yüksek7,5 | — | %2,3 | 28 Şub 2018 |
28İzleyin | CVE-2010-0696Kavram kanıtı | Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! aljoomlaworks · jw allvideos · CWE-22 | Orta5,0 | — | %28,2 | 23 Şub 2010 |
26İzleyin | CVE-2026-48944İstismar yok | Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-22 | Orta6,5 | — | %0,4 | 25 Haz 2026 |
26İzleyin | CVE-2026-48943İstismar yok | Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-915 | Orta6,5 | — | %0,3 | 25 Haz 2026 |
26İzleyin | CVE-2026-48941İstismar yok | Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-862 | Orta6,5 | — | %0,2 | 25 Haz 2026 |
25İzleyin | CVE-2026-48946İstismar yok | Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-434 | Orta6,3 | — | %0,2 | 25 Haz 2026 |
24İzleyin | CVE-2026-48942İstismar yok | Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-79 | Orta6,1 | — | %0,2 | 25 Haz 2026 |
21İzleyin | CVE-2026-48945İstismar yok | Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-434 | Orta5,3 | — | %0,3 | 25 Haz 2026 |
13İzleyin | CVE-2026-48940İstismar yok | Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26joomlaworks · k2 · CWE-79 | Düşük3,4 | — | %0,2 | 25 Haz 2026 |
- CVE-2019-1957647Planlayın
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, om
KritikCVSS 9,8Kavram kanıtıEPSS %26verot project · verot4 Ara 2019
- CVE-2019-1963440Planlayın
class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products,
KritikCVSS 9,8Kavram kanıtıEPSS %4verot project · verot17 Ara 2019
- CVE-2009-239531İzleyin
SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL
YüksekCVSS 7,5Kavram kanıtıEPSS %3joomla · joomla\!9 Tem 2009
- CVE-2018-748231İzleyin
The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files,
YüksekCVSS 7,5İstismar yokEPSS %2joomlaworks · k228 Şub 2018
- CVE-2010-069628İzleyin
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! al
OrtaCVSS 5,0Kavram kanıtıEPSS %28joomlaworks · jw allvideos23 Şub 2010
- CVE-2026-4894426İzleyin
Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26
OrtaCVSS 6,5İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894326İzleyin
Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26
OrtaCVSS 6,5İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894126İzleyin
Joomla Extension - getk2.org - Unauthenticated folder delete in K2 extension for Joomla < 2.26
OrtaCVSS 6,5İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894625İzleyin
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
OrtaCVSS 6,3İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894224İzleyin
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26
OrtaCVSS 6,1İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894521İzleyin
Joomla Extension - getk2.org - Privileged RCE vulnerability in K2 extension for Joomla < 2.26
OrtaCVSS 5,3İstismar yokEPSS %0joomlaworks · k225 Haz 2026
- CVE-2026-4894013İzleyin
Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26
DüşükCVSS 3,4İstismar yokEPSS %0joomlaworks · k225 Haz 2026