kasseler-cms kayıtları
kasseler-cms üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2013-3727Kavram kanıtı | SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groupkasseler-cms · kasseler-cms · CWE-89 | Yüksek7,5 | — | %2,9 | 13 Mar 2014 |
30İzleyin | CVE-2008-4356Kavram kanıtı | Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kasseler-cms · kasseler cms · CWE-89 | Yüksek7,5 | — | %0,9 | 30 Eyl 2008 |
27İzleyin | CVE-2013-3729Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authenticatiokasseler-cms · kasseler-cms · CWE-352 | Orta6,8 | — | %1,2 | 13 Mar 2014 |
21İzleyin | CVE-2009-2229Kavram kanıtı | Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a ..kasseler-cms · kasseler cms · CWE-22 | Orta5,0 | — | %3,5 | 26 Haz 2009 |
21İzleyin | CVE-2008-3087Kavram kanıtı | Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a ..kasseler-cms · kasseler cms · CWE-22 | Orta5,0 | — | %2,9 | 9 Tem 2008 |
17İzleyin | CVE-2008-3088Kavram kanıtı | Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrarkasseler-cms · kasseler cms · CWE-79 | Orta4,3 | — | %1,5 | 9 Tem 2008 |
17İzleyin | CVE-2009-4822Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web scriptkasseler-cms · kasseler cms · CWE-79 | Orta4,3 | — | %1,4 | 27 Nis 2010 |
17İzleyin | CVE-2009-2228Kavram kanıtı | Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via thkasseler-cms · kasseler cms · CWE-79 | Orta4,3 | — | %1,4 | 26 Haz 2009 |
15İzleyin | CVE-2013-3728Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categorkasseler-cms · kasseler-cms · CWE-79 | Düşük3,5 | — | %2,9 | 13 Mar 2014 |
- CVE-2013-372731İzleyin
SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the group
YüksekCVSS 7,5Kavram kanıtıEPSS %2kasseler-cms · kasseler-cms13 Mar 2014
- CVE-2008-435630İzleyin
Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the
YüksekCVSS 7,5Kavram kanıtıEPSS %0kasseler-cms · kasseler cms30 Eyl 2008
- CVE-2013-372927İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authenticatio
OrtaCVSS 6,8Kavram kanıtıEPSS %1kasseler-cms · kasseler-cms13 Mar 2014
- CVE-2009-222921İzleyin
Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %3kasseler-cms · kasseler cms26 Haz 2009
- CVE-2008-308721İzleyin
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %2kasseler-cms · kasseler cms9 Tem 2008
- CVE-2008-308817İzleyin
Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrar
OrtaCVSS 4,3Kavram kanıtıEPSS %1kasseler-cms · kasseler cms9 Tem 2008
- CVE-2009-482217İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1kasseler-cms · kasseler cms27 Nis 2010
- CVE-2009-222817İzleyin
Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via th
OrtaCVSS 4,3Kavram kanıtıEPSS %1kasseler-cms · kasseler cms26 Haz 2009
- CVE-2013-372815İzleyin
Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categor
DüşükCVSS 3,5Kavram kanıtıEPSS %2kasseler-cms · kasseler-cms13 Mar 2014