katywhitton kayıtları
katywhitton üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2008-5589Kavram kanıtı | SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1)katywhitton · rankem · CWE-89 | Yüksek7,5 | — | %0,9 | 16 Ara 2008 |
30İzleyin | CVE-2009-0334Kavram kanıtı | SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day paramkatywhitton · blogit\! · CWE-89 | Yüksek7,5 | — | %0,9 | 29 Oca 2009 |
30İzleyin | CVE-2009-0337Kavram kanıtı | SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) monthkatywhitton · blogit\! · CWE-89 | Yüksek7,5 | — | %0,9 | 29 Oca 2009 |
30İzleyin | CVE-2008-5588Kavram kanıtı | SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID pakatywhitton · rankem · CWE-89 | Yüksek7,5 | — | %0,9 | 16 Ara 2008 |
21İzleyin | CVE-2009-0249Kavram kanıtı | Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlkatywhitton · rankem · CWE-264 | Orta5,0 | — | %2,2 | 22 Oca 2009 |
21İzleyin | CVE-2009-0336Kavram kanıtı | Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to downkatywhitton · blogit\! · CWE-264 | Orta5,0 | — | %2,2 | 29 Oca 2009 |
17İzleyin | CVE-2009-0248Kavram kanıtı | Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTMLkatywhitton · rankem · CWE-79 | Orta4,3 | — | %1,4 | 22 Oca 2009 |
17İzleyin | CVE-2009-0335Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTMLkatywhitton · blogit\! · CWE-79 | Orta4,3 | — | %1,4 | 29 Oca 2009 |
- CVE-2008-558930İzleyin
SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1)
YüksekCVSS 7,5Kavram kanıtıEPSS %0katywhitton · rankem16 Ara 2008
- CVE-2009-033430İzleyin
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day param
YüksekCVSS 7,5Kavram kanıtıEPSS %0katywhitton · blogit\!29 Oca 2009
- CVE-2009-033730İzleyin
SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month
YüksekCVSS 7,5Kavram kanıtıEPSS %0katywhitton · blogit\!29 Oca 2009
- CVE-2008-558830İzleyin
SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID pa
YüksekCVSS 7,5Kavram kanıtıEPSS %0katywhitton · rankem16 Ara 2008
- CVE-2009-024921İzleyin
Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl
OrtaCVSS 5,0Kavram kanıtıEPSS %2katywhitton · rankem22 Oca 2009
- CVE-2009-033621İzleyin
Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to down
OrtaCVSS 5,0Kavram kanıtıEPSS %2katywhitton · blogit\!29 Oca 2009
- CVE-2009-024817İzleyin
Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1katywhitton · rankem22 Oca 2009
- CVE-2009-033517İzleyin
Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3Kavram kanıtıEPSS %1katywhitton · blogit\!29 Oca 2009