lightneasy kayıtları
lightneasy üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %15,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-6593Kavram kanıtı | SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary lightneasy · lightneasy · CWE-89 | Yüksek7,5 | — | %3,4 | 3 Nis 2009 |
31İzleyin | CVE-2008-6592Kavram kanıtı | thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copylightneasy · lightneasy · CWE-22 | Yüksek7,5 | — | %2,9 | 3 Nis 2009 |
30İzleyin | CVE-2010-3484Kavram kanıtı | SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle paramlightneasy · lightneasy · CWE-89 | Yüksek7,5 | — | %1,3 | 22 Eyl 2010 |
30İzleyin | CVE-2010-3485Kavram kanıtı | SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle clightneasy · lightneasy · CWE-89 | Yüksek7,5 | — | %1,2 | 22 Eyl 2010 |
27İzleyin | CVE-2010-4752Kavram kanıtı | SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arblightneasy · lightneasy · CWE-89 | Orta6,8 | — | %0,9 | 1 Mar 2011 |
24İzleyin | CVE-2010-4751Kavram kanıtı | SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to elightneasy · lightneasy · CWE-89 | Orta6,0 | — | %0,8 | 1 Mar 2011 |
22İzleyin | CVE-2008-6537Kavram kanıtı | LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password vialightneasy · lightneasy · CWE-200 | Orta5,0 | — | %6,2 | 29 Mar 2009 |
21İzleyin | CVE-2008-6590Kavram kanıtı | Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow lightneasy · lightneasy · CWE-22 | Orta5,0 | — | %3,3 | 3 Nis 2009 |
20İzleyin | CVE-2008-6591İstismar yok | LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via lightneasy · lightneasy · CWE-94 | Orta5,0 | — | %1,2 | 3 Nis 2009 |
17İzleyin | CVE-2008-6589İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2,lightneasy · lightneasy · CWE-79 | Orta4,3 | — | %1,2 | 3 Nis 2009 |
17İzleyin | CVE-2010-4753İstismar yok | Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTMlightneasy · lightneasy · CWE-79 | Orta4,3 | — | %1,0 | 1 Mar 2011 |
17İzleyin | CVE-2009-1937İstismar yok | Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and 2.2.2 SQLite allowslightneasy · lightneasy · CWE-79 | Orta4,3 | — | %1,0 | 5 Haz 2009 |
14İzleyin | CVE-2011-3978İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitralightneasy · lightneasy · CWE-79 | Düşük3,5 | — | %1,5 | 4 Eki 2011 |
- CVE-2008-659331İzleyin
SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary
YüksekCVSS 7,5Kavram kanıtıEPSS %3lightneasy · lightneasy3 Nis 2009
- CVE-2008-659231İzleyin
thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy
YüksekCVSS 7,5Kavram kanıtıEPSS %2lightneasy · lightneasy3 Nis 2009
- CVE-2010-348430İzleyin
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the handle param
YüksekCVSS 7,5Kavram kanıtıEPSS %1lightneasy · lightneasy22 Eyl 2010
- CVE-2010-348530İzleyin
SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle c
YüksekCVSS 7,5Kavram kanıtıEPSS %1lightneasy · lightneasy22 Eyl 2010
- CVE-2010-475227İzleyin
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arb
OrtaCVSS 6,8Kavram kanıtıEPSS %0lightneasy · lightneasy1 Mar 2011
- CVE-2010-475124İzleyin
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to e
OrtaCVSS 6,0Kavram kanıtıEPSS %0lightneasy · lightneasy1 Mar 2011
- CVE-2008-653722İzleyin
LightNEasy/lightneasy.php in LightNEasy No database version 1.2 allows remote attackers to obtain the hash of the administrator password via
OrtaCVSS 5,0Kavram kanıtıEPSS %6lightneasy · lightneasy29 Mar 2009
- CVE-2008-659021İzleyin
Multiple directory traversal vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow
OrtaCVSS 5,0Kavram kanıtıEPSS %3lightneasy · lightneasy3 Nis 2009
- CVE-2008-659120İzleyin
LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via
OrtaCVSS 5,0İstismar yokEPSS %1lightneasy · lightneasy3 Nis 2009
- CVE-2008-658917İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy "no database" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2,
OrtaCVSS 4,3İstismar yokEPSS %1lightneasy · lightneasy3 Nis 2009
- CVE-2010-475317İzleyin
Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTM
OrtaCVSS 4,3İstismar yokEPSS %1lightneasy · lightneasy1 Mar 2011
- CVE-2009-193717İzleyin
Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and 2.2.2 SQLite allows
OrtaCVSS 4,3İstismar yokEPSS %1lightneasy · lightneasy5 Haz 2009
- CVE-2011-397814İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitra
DüşükCVSS 3,5İstismar yokEPSS %1lightneasy · lightneasy4 Eki 2011