İçeriğe atla
Noroxi

lifetype kayıtları

lifetype üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    10 kayıt
    • CVE-2008-2629
      31İzleyin

      SQL injection vulnerability in the LifeType (formerly pLog) module for Drupal allows remote attackers to execute arbitrary SQL commands via

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      drupal · drupal9 Haz 2008

    • CVE-2006-2857
      30İzleyin

      SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via the articleId param

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      lifetype · lifetype6 Haz 2006

    • CVE-2006-3577
      30İzleyin

      SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      lifetype · lifetype13 Tem 2006

    • CVE-2007-0979
      21İzleyin

      Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file

      OrtaCVSS 5,0İstismar yokEPSS %1

      lifetype · lifetype15 Şub 2007

    • CVE-2006-6112
      20İzleyin

      LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote

      OrtaCVSS 5,0İstismar yokEPSS %1

      lifetype · lifetype6 Ara 2006

    • CVE-2006-1809
      20İzleyin

      index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in

      OrtaCVSS 5,0İstismar yokEPSS %1

      lifetype · lifetype18 Nis 2006

    • CVE-2011-3751
      20İzleyin

      LifeType 1.2.10 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

      OrtaCVSS 5,0İstismar yokEPSS %1

      lifetype · lifetype23 Eyl 2011

    • CVE-2008-2196
      17İzleyin

      Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via t

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      lifetype · lifetype14 May 2008

    • CVE-2008-2178
      17İzleyin

      Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via t

      OrtaCVSS 4,3İstismar yokEPSS %1

      lifetype · lifetype13 May 2008

    • CVE-2006-1808
      11İzleyin

      Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web script or HTML via t

      DüşükCVSS 2,6Kavram kanıtıEPSS %1

      lifetype · lifetype18 Nis 2006