joommasters kayıtları
joommasters üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
57Planlayın | CVE-2023-27034Kavram kanıtı | PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.joommasters · jms blog · CWE-89 | Kritik9,8 | — | %58,7 | 23 Mar 2023 |
40Planlayın | CVE-2018-6581Kavram kanıtı | SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.joommasters · jms music · CWE-89 | Kritik9,8 | — | %2,7 | 2 Şub 2018 |
39İzleyin | CVE-2023-29630İstismar yok | PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.joommasters · jms drop mega menu · CWE-89 | Kritik9,8 | — | %1,0 | 5 Haz 2023 |
39İzleyin | CVE-2023-29632İstismar yok | PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.joommasters · jmspagebuilder · CWE-89 | Kritik9,8 | — | %1,0 | 6 Haz 2023 |
39İzleyin | CVE-2023-29631İstismar yok | PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.joommasters · jms slider · CWE-434 | Kritik9,8 | — | %0,7 | 5 Haz 2023 |
39İzleyin | CVE-2023-50030İstismar yok | In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.joommasters · jmssetting · CWE-89 | Kritik9,8 | — | %0,7 | 19 Oca 2024 |
- CVE-2023-2703457Planlayın
PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.
KritikCVSS 9,8Kavram kanıtıEPSS %59joommasters · jms blog23 Mar 2023
- CVE-2018-658140Planlayın
SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %3joommasters · jms music2 Şub 2018
- CVE-2023-2963039İzleyin
PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.
KritikCVSS 9,8İstismar yokEPSS %1joommasters · jms drop mega menu5 Haz 2023
- CVE-2023-2963239İzleyin
PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.
KritikCVSS 9,8İstismar yokEPSS %1joommasters · jmspagebuilder6 Haz 2023
- CVE-2023-2963139İzleyin
PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.
KritikCVSS 9,8İstismar yokEPSS %1joommasters · jms slider5 Haz 2023
- CVE-2023-5003039İzleyin
In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.
KritikCVSS 9,8İstismar yokEPSS %1joommasters · jmssetting19 Oca 2024