jtbc kayıtları
jtbc üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2018-17836İstismar yok | An issue was discovered in JTBC(PHP) 3.0.1.6.jtbc · jtbc php · CWE-22 | Yüksek8,8 | — | %1,6 | 1 Eki 2018 |
35İzleyin | CVE-2018-17429İstismar yok | /console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.jtbc · jtbc · CWE-352 | Yüksek8,8 | — | %0,6 | 7 Mar 2019 |
35İzleyin | CVE-2018-19546İstismar yok | JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parajtbc · jtbc php · CWE-79 | Yüksek8,8 | — | %0,5 | 26 Kas 2018 |
35İzleyin | CVE-2018-18436İstismar yok | JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.jtbc · jtbc php · CWE-352 | Yüksek8,8 | — | %0,5 | 17 Eki 2018 |
35İzleyin | CVE-2018-19327İstismar yok | An issue was discovered in JTBC(PHP) 3.0.1.7.jtbc · jtbc php · CWE-352 | Yüksek8,8 | — | %0,5 | 17 Kas 2018 |
31İzleyin | CVE-2019-9662İstismar yok | An issue was discovered in JTBC(PHP) 3.0.1.8.jtbc · jtbc php · CWE-22 | Yüksek7,5 | — | %1,7 | 11 Mar 2019 |
30İzleyin | CVE-2018-17838İstismar yok | An issue was discovered in JTBC(PHP) 3.0.1.6.jtbc · jtbc php · CWE-22 | Yüksek7,5 | — | %1,5 | 1 Eki 2018 |
30İzleyin | CVE-2018-17837İstismar yok | An issue was discovered in JTBC(PHP) 3.0.1.6.jtbc · jtbc php · CWE-22 | Yüksek7,5 | — | %1,3 | 1 Eki 2018 |
30İzleyin | CVE-2019-8433İstismar yok | JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.jtbc · jtbc php · CWE-434 | Yüksek7,5 | — | %1,2 | 17 Şub 2019 |
24İzleyin | CVE-2018-19547İstismar yok | JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.jtbc · jtbc php · CWE-79 | Orta6,1 | — | %0,7 | 26 Kas 2018 |
- CVE-2018-1783635İzleyin
An issue was discovered in JTBC(PHP) 3.0.1.6.
YüksekCVSS 8,8İstismar yokEPSS %2jtbc · jtbc php1 Eki 2018
- CVE-2018-1742935İzleyin
/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.
YüksekCVSS 8,8İstismar yokEPSS %1jtbc · jtbc7 Mar 2019
- CVE-2018-1954635İzleyin
JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content para
YüksekCVSS 8,8İstismar yokEPSS %1jtbc · jtbc php26 Kas 2018
- CVE-2018-1843635İzleyin
JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
YüksekCVSS 8,8İstismar yokEPSS %1jtbc · jtbc php17 Eki 2018
- CVE-2018-1932735İzleyin
An issue was discovered in JTBC(PHP) 3.0.1.7.
YüksekCVSS 8,8İstismar yokEPSS %0jtbc · jtbc php17 Kas 2018
- CVE-2019-966231İzleyin
An issue was discovered in JTBC(PHP) 3.0.1.8.
YüksekCVSS 7,5İstismar yokEPSS %2jtbc · jtbc php11 Mar 2019
- CVE-2018-1783830İzleyin
An issue was discovered in JTBC(PHP) 3.0.1.6.
YüksekCVSS 7,5İstismar yokEPSS %2jtbc · jtbc php1 Eki 2018
- CVE-2018-1783730İzleyin
An issue was discovered in JTBC(PHP) 3.0.1.6.
YüksekCVSS 7,5İstismar yokEPSS %1jtbc · jtbc php1 Eki 2018
- CVE-2019-843330İzleyin
JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.
YüksekCVSS 7,5İstismar yokEPSS %1jtbc · jtbc php17 Şub 2019
- CVE-2018-1954724İzleyin
JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.
OrtaCVSS 6,1İstismar yokEPSS %1jtbc · jtbc php26 Kas 2018