juzaweb kayıtları

juzaweb üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

16 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2023-46468İstismar yok	An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.juzaweb · juzaweb cms · CWE-74 RCE	Yüksek7,8	—	%0,5	27 Eki 2023
21İzleyin	CVE-2023-46467İstismar yok	Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload tjuzaweb · cms · CWE-79 RCE XSS	Orta5,4	—	%0,5	27 Eki 2023
21İzleyin	CVE-2025-5424İstismar yok	juzaweb CMS Media Page media access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,5	1 Haz 2025
21İzleyin	CVE-2025-5422İstismar yok	juzaweb CMS Email Logs Page email access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,5	1 Haz 2025
21İzleyin	CVE-2025-5425İstismar yok	juzaweb CMS Theme Editor Page default access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	1 Haz 2025
21İzleyin	CVE-2025-5421İstismar yok	juzaweb CMS Plugin Editor Page editor access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	1 Haz 2025
21İzleyin	CVE-2025-5423İstismar yok	juzaweb CMS General Setting Page general access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	1 Haz 2025
21İzleyin	CVE-2025-5428İstismar yok	juzaweb CMS Error Logs Page log-viewer access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	2 Haz 2025
21İzleyin	CVE-2025-5427İstismar yok	juzaweb CMS Permalinks Page permalinks access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	2 Haz 2025
21İzleyin	CVE-2025-5426İstismar yok	juzaweb CMS Menu Page menus access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	1 Haz 2025
21İzleyin	CVE-2025-5429İstismar yok	juzaweb CMS Plugins Page install access controljuzaweb · cms · CWE-266	Orta5,3	—	%0,4	2 Haz 2025
20İzleyin	CVE-2024-7551İstismar yok	juzaweb CMS Theme Editor default path traversaljuzaweb · cms · CWE-22 Yol geçişi	Orta5,1	—	%0,8	6 Ağu 2024
20İzleyin	CVE-2025-5420İstismar yok	juzaweb CMS Profile Page upload cross site scriptingjuzaweb · cms · CWE-79 XSS	Orta5,1	—	%0,3	1 Haz 2025
19İzleyin	CVE-2023-46906İstismar yok	juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code.juzaweb · cms · CWE-863 Erişim denetimi (IDOR) Hizmet dışı bırakma	Orta4,9	—	%0,6	8 Oca 2024
8İzleyin	CVE-2025-6735İstismar yok	juzaweb CMS Import Page imports improper authorizationjuzaweb · cms · CWE-266	Düşük2,1	—	%0,4	26 Haz 2025
8İzleyin	CVE-2025-6736İstismar yok	juzaweb CMS Add New Themes Page install improper authorizationjuzaweb · cms · CWE-266	Düşük2,1	—	%0,4	26 Haz 2025

CVE-2023-46468
31İzleyin
An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
juzaweb · juzaweb cms27 Eki 2023
CVE-2023-46467
21İzleyin
Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload t
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
juzaweb · cms27 Eki 2023
CVE-2025-5424
21İzleyin
juzaweb CMS Media Page media access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5422
21İzleyin
juzaweb CMS Email Logs Page email access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5425
21İzleyin
juzaweb CMS Theme Editor Page default access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5421
21İzleyin
juzaweb CMS Plugin Editor Page editor access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5423
21İzleyin
juzaweb CMS General Setting Page general access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5428
21İzleyin
juzaweb CMS Error Logs Page log-viewer access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms2 Haz 2025
CVE-2025-5427
21İzleyin
juzaweb CMS Permalinks Page permalinks access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms2 Haz 2025
CVE-2025-5426
21İzleyin
juzaweb CMS Menu Page menus access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms1 Haz 2025
CVE-2025-5429
21İzleyin
juzaweb CMS Plugins Page install access control
OrtaCVSS 5,3İstismar yokEPSS %0
juzaweb · cms2 Haz 2025
CVE-2024-7551
20İzleyin
juzaweb CMS Theme Editor default path traversal
OrtaCVSS 5,1İstismar yokEPSS %0
- Yol geçişi
juzaweb · cms6 Ağu 2024
CVE-2025-5420
20İzleyin
juzaweb CMS Profile Page upload cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
juzaweb · cms1 Haz 2025
CVE-2023-46906
19İzleyin
juzaweb <= 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code.
OrtaCVSS 4,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
juzaweb · cms8 Oca 2024
CVE-2025-6735
8İzleyin
juzaweb CMS Import Page imports improper authorization
DüşükCVSS 2,1İstismar yokEPSS %0
juzaweb · cms26 Haz 2025
CVE-2025-6736
8İzleyin
juzaweb CMS Add New Themes Page install improper authorization
DüşükCVSS 2,1İstismar yokEPSS %0
juzaweb · cms26 Haz 2025