jspwiki kayıtları
jspwiki üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2008-1231Kavram kanıtı | Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local jspwiki · jspwiki · CWE-22 | Kritik9,3 | — | %7,6 | 10 Mar 2008 |
38İzleyin | CVE-2008-1230Kavram kanıtı | Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files viajspwiki · jspwiki · CWE-264 | Kritik9,3 | — | %4,4 | 10 Mar 2008 |
18İzleyin | CVE-2007-5120Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web scripjspwiki · jspwiki · CWE-79 | Orta4,3 | — | %2,3 | 27 Eyl 2007 |
18İzleyin | CVE-2008-1229Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script ojspwiki · jspwiki · CWE-79 | Orta4,3 | — | %2,0 | 10 Mar 2008 |
17İzleyin | CVE-2007-5121İstismar yok | Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redijspwiki · jspwiki · CWE-79 | Orta4,3 | — | %1,3 | 27 Eyl 2007 |
17İzleyin | CVE-2007-5119İstismar yok | JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version pjspwiki · jspwiki · CWE-20 | Orta4,3 | — | %1,2 | 27 Eyl 2007 |
17İzleyin | CVE-2004-1544İstismar yok | Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web sjspwiki · jspwiki | Orta4,3 | — | %1,2 | 31 Ara 2004 |
- CVE-2008-123139İzleyin
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local
KritikCVSS 9,3Kavram kanıtıEPSS %7jspwiki · jspwiki10 Mar 2008
- CVE-2008-123038İzleyin
Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via
KritikCVSS 9,3Kavram kanıtıEPSS %4jspwiki · jspwiki10 Mar 2008
- CVE-2007-512018İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web scrip
OrtaCVSS 4,3Kavram kanıtıEPSS %2jspwiki · jspwiki27 Eyl 2007
- CVE-2008-122918İzleyin
Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script o
OrtaCVSS 4,3Kavram kanıtıEPSS %2jspwiki · jspwiki10 Mar 2008
- CVE-2007-512117İzleyin
Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redi
OrtaCVSS 4,3İstismar yokEPSS %1jspwiki · jspwiki27 Eyl 2007
- CVE-2007-511917İzleyin
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version p
OrtaCVSS 4,3İstismar yokEPSS %1jspwiki · jspwiki27 Eyl 2007
- CVE-2004-154417İzleyin
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web s
OrtaCVSS 4,3İstismar yokEPSS %1jspwiki · jspwiki31 Ara 2004