kjayvik kayıtları
kjayvik üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-42765İstismar yok | A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrakjayvik · bus ticket reservation system · CWE-89 | Kritik9,8 | — | %0,7 | 23 Ağu 2024 |
37İzleyin | CVE-2024-42764İstismar yok | Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.kjayvik · bus ticket reservation system · CWE-352 | Kritik9,4 | — | %0,3 | 23 Ağu 2024 |
24İzleyin | CVE-2024-42761İstismar yok | A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which kjayvik · bus ticket reservation system · CWE-79 | Orta6,1 | — | %0,5 | 22 Ağu 2024 |
21İzleyin | CVE-2024-42762İstismar yok | A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows kjayvik · bus ticket reservation system · CWE-79 | Orta5,4 | — | %0,4 | 22 Ağu 2024 |
21İzleyin | CVE-2024-42763İstismar yok | A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1kjayvik · bus ticket reservation system · CWE-79 | Orta5,4 | — | %0,4 | 22 Ağu 2024 |
21İzleyin | CVE-2024-42766İstismar yok | Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.kjayvik · bus ticket reservation system · CWE-284 | Orta5,4 | — | %0,3 | 23 Ağu 2024 |
- CVE-2024-4276539İzleyin
A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitra
KritikCVSS 9,8İstismar yokEPSS %1kjayvik · bus ticket reservation system23 Ağu 2024
- CVE-2024-4276437İzleyin
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.
KritikCVSS 9,4İstismar yokEPSS %0kjayvik · bus ticket reservation system23 Ağu 2024
- CVE-2024-4276124İzleyin
A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which
OrtaCVSS 6,1İstismar yokEPSS %0kjayvik · bus ticket reservation system22 Ağu 2024
- CVE-2024-4276221İzleyin
A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows
OrtaCVSS 5,4İstismar yokEPSS %0kjayvik · bus ticket reservation system22 Ağu 2024
- CVE-2024-4276321İzleyin
A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1
OrtaCVSS 5,4İstismar yokEPSS %0kjayvik · bus ticket reservation system22 Ağu 2024
- CVE-2024-4276621İzleyin
Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.
OrtaCVSS 5,4İstismar yokEPSS %0kjayvik · bus ticket reservation system23 Ağu 2024