Jorani kayıtları
jorani üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %11,1
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2023-26469Silahlaştırılmış | In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.jorani · jorani · CWE-22 | Kritik9,8 | — | %82,9 | 17 Ağu 2023 |
39İzleyin | CVE-2022-34132İstismar yok | Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php.jorani · jorani · CWE-89 | Kritik9,8 | — | %1,5 | 27 Haz 2022 |
35İzleyin | CVE-2023-2681İstismar yok | SQL Injection on Joranijorani · jorani · CWE-89 | Yüksek8,8 | — | %0,7 | 3 Eki 2023 |
35İzleyin | CVE-2022-34134İstismar yok | Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Users.php.jorani · jorani · CWE-352 | Yüksek8,8 | — | %0,4 | 27 Haz 2022 |
30İzleyin | CVE-2025-67102İstismar yok | A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL cojorani · jorani · CWE-89 | Yüksek7,6 | — | %0,2 | 17 Şub 2026 |
26İzleyin | CVE-2023-45540Kavram kanıtı | An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the commentjorani · leave management system · CWE-74 | Orta6,5 | — | %0,6 | 16 Eki 2023 |
24İzleyin | CVE-2022-34133İstismar yok | Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Comment parameter at application/controllers/Leavesjorani · jorani · CWE-79 | Orta6,1 | — | %0,6 | 27 Haz 2022 |
24İzleyin | CVE-2022-48118İstismar yok | Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter.jorani · jorani · CWE-79 | Orta6,1 | — | %0,4 | 27 Oca 2023 |
21İzleyin | CVE-2023-48205İstismar yok | Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.jorani · leave management system · CWE-74 | Orta5,3 | — | %0,7 | 7 Ara 2023 |
- CVE-2023-2646964Bu hafta
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
KritikCVSS 9,8SilahlaştırılmışEPSS %82jorani · jorani17 Ağu 2023
- CVE-2022-3413239İzleyin
Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php.
KritikCVSS 9,8İstismar yokEPSS %1jorani · jorani27 Haz 2022
- CVE-2023-268135İzleyin
SQL Injection on Jorani
YüksekCVSS 8,8İstismar yokEPSS %0jorani · jorani3 Eki 2023
- CVE-2022-3413435İzleyin
Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Users.php.
YüksekCVSS 8,8İstismar yokEPSS %0jorani · jorani27 Haz 2022
- CVE-2025-6710230İzleyin
A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL co
YüksekCVSS 7,6İstismar yokEPSS %0jorani · jorani17 Şub 2026
- CVE-2023-4554026İzleyin
An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment
OrtaCVSS 6,5Kavram kanıtıEPSS %0jorani · leave management system16 Eki 2023
- CVE-2022-3413324İzleyin
Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Comment parameter at application/controllers/Leaves
OrtaCVSS 6,1İstismar yokEPSS %0jorani · jorani27 Haz 2022
- CVE-2022-4811824İzleyin
Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter.
OrtaCVSS 6,1İstismar yokEPSS %0jorani · jorani27 Oca 2023
- CVE-2023-4820521İzleyin
Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.
OrtaCVSS 5,3İstismar yokEPSS %0jorani · leave management system7 Ara 2023