laiketui kayıtları
laiketui üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-434 Unrestricted Upload of File with Dangerous Type4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-40954İstismar yok | Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.laiketui · laiketui · CWE-434 | Kritik9,8 | — | %1,7 | 23 Haz 2022 |
39İzleyin | CVE-2023-4559İstismar yok | Bettershop LaikeTui POST Request unrestricted uploadlaiketui · laiketui · CWE-434 | Kritik9,8 | — | %0,6 | 27 Ağu 2023 |
39İzleyin | CVE-2023-4988İstismar yok | Bettershop LaikeTui unrestricted uploadlaiketui · laiketui · CWE-434 | Kritik9,8 | — | %0,5 | 15 Eyl 2023 |
35İzleyin | CVE-2021-34128İstismar yok | LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP alaiketui · laiketui · CWE-434 | Yüksek8,8 | — | %1,4 | 15 Haz 2021 |
35İzleyin | CVE-2020-19159İstismar yok | Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=memblaiketui · laiketui · CWE-352 | Yüksek8,8 | — | %0,9 | 15 Eyl 2021 |
33İzleyin | CVE-2021-34129İstismar yok | LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall tlaiketui · laiketui · CWE-22 | Yüksek8,1 | — | %1,7 | 15 Haz 2021 |
30İzleyin | CVE-2021-40956İstismar yok | LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.laiketui · laiketui · CWE-89 | Yüksek7,5 | — | %1,1 | 23 Haz 2022 |
28İzleyin | CVE-2021-40955İstismar yok | SQL injection exists in LaiKetui v3.5.0 the background administrator list.laiketui · laiketui · CWE-89 | Yüksek7,2 | — | %0,9 | 23 Haz 2022 |
- CVE-2021-4095440Planlayın
Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
KritikCVSS 9,8İstismar yokEPSS %1laiketui · laiketui23 Haz 2022
- CVE-2023-455939İzleyin
Bettershop LaikeTui POST Request unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %0laiketui · laiketui27 Ağu 2023
- CVE-2023-498839İzleyin
Bettershop LaikeTui unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %0laiketui · laiketui15 Eyl 2023
- CVE-2021-3412835İzleyin
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP a
YüksekCVSS 8,8İstismar yokEPSS %1laiketui · laiketui15 Haz 2021
- CVE-2020-1915935İzleyin
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=memb
YüksekCVSS 8,8İstismar yokEPSS %0laiketui · laiketui15 Eyl 2021
- CVE-2021-3412933İzleyin
LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall t
YüksekCVSS 8,1İstismar yokEPSS %1laiketui · laiketui15 Haz 2021
- CVE-2021-4095630İzleyin
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
YüksekCVSS 7,5İstismar yokEPSS %1laiketui · laiketui23 Haz 2022
- CVE-2021-4095528İzleyin
SQL injection exists in LaiKetui v3.5.0 the background administrator list.
YüksekCVSS 7,2İstismar yokEPSS %0laiketui · laiketui23 Haz 2022