kitesky kayıtları
kitesky üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-922 Insecure Storage of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-31707İstismar yok | Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.kitesky · kitecms · CWE-434 | Kritik9,8 | — | %1,2 | 4 Nis 2023 |
35İzleyin | CVE-2020-20671İstismar yok | A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.kitesky · kitecms · CWE-352 | Yüksek8,8 | — | %0,5 | 13 Eyl 2021 |
31İzleyin | CVE-2020-20672İstismar yok | An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.kitesky · kitecms · CWE-434 | Yüksek7,8 | — | %0,8 | 13 Eyl 2021 |
30İzleyin | CVE-2021-36546İstismar yok | Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.kitesky · kitecms · CWE-922 | Yüksek7,5 | — | %0,8 | 3 Şub 2023 |
28İzleyin | CVE-2021-3267İstismar yok | File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.kitesky · kitecms · CWE-434 | Yüksek7,2 | — | %1,2 | 4 Nis 2023 |
26İzleyin | CVE-2021-31731İstismar yok | A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to indekitesky · kitecms · CWE-22 | Orta6,5 | — | %1,3 | 12 Ağu 2021 |
26İzleyin | CVE-2022-28445İstismar yok | KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.kitesky · kitecms · CWE-552 | Orta6,5 | — | %1,0 | 21 Nis 2022 |
24İzleyin | CVE-2020-20522İstismar yok | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user paramekitesky · kitecms · CWE-79 | Orta6,1 | — | %0,5 | 4 Nis 2023 |
24İzleyin | CVE-2020-20521İstismar yok | Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.kitesky · kitecms · CWE-79 | Orta6,1 | — | %0,5 | 4 Nis 2023 |
- CVE-2021-3170739İzleyin
Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.
KritikCVSS 9,8İstismar yokEPSS %1kitesky · kitecms4 Nis 2023
- CVE-2020-2067135İzleyin
A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.
YüksekCVSS 8,8İstismar yokEPSS %0kitesky · kitecms13 Eyl 2021
- CVE-2020-2067231İzleyin
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.
YüksekCVSS 7,8İstismar yokEPSS %0kitesky · kitecms13 Eyl 2021
- CVE-2021-3654630İzleyin
Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.
YüksekCVSS 7,5İstismar yokEPSS %0kitesky · kitecms3 Şub 2023
- CVE-2021-326728İzleyin
File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.
YüksekCVSS 7,2İstismar yokEPSS %1kitesky · kitecms4 Nis 2023
- CVE-2021-3173126İzleyin
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to inde
OrtaCVSS 6,5İstismar yokEPSS %1kitesky · kitecms12 Ağu 2021
- CVE-2022-2844526İzleyin
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.
OrtaCVSS 6,5İstismar yokEPSS %1kitesky · kitecms21 Nis 2022
- CVE-2020-2052224İzleyin
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parame
OrtaCVSS 6,1İstismar yokEPSS %0kitesky · kitecms4 Nis 2023
- CVE-2020-2052124İzleyin
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.
OrtaCVSS 6,1İstismar yokEPSS %0kitesky · kitecms4 Nis 2023