limbo cms kayıtları
limbo cms üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-16 Configuration1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2006-4860İstismar yok | Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treelimbo cms · limbo cms | Kritik10,0 | — | %3,1 | 19 Eyl 2006 |
32İzleyin | CVE-2006-4859Kavram kanıtı | Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L andlimbo cms · limbo cms | Yüksek7,5 | — | %7,5 | 19 Eyl 2006 |
31İzleyin | CVE-2006-1662Kavram kanıtı | The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in limbo cms · limbo cms | Yüksek7,5 | — | %3,3 | 7 Nis 2006 |
30İzleyin | CVE-2005-4318Kavram kanıtı | SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arblimbo cms · limbo cms | Yüksek7,5 | — | %1,6 | 17 Ara 2005 |
30İzleyin | CVE-2008-0734Kavram kanıtı | SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrlimbo cms · limbo cms · CWE-89 | Yüksek7,5 | — | %1,0 | 12 Şub 2008 |
30İzleyin | CVE-2008-6078Kavram kanıtı | SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute arlimbo cms · com privmsg · CWE-89 | Yüksek7,5 | — | %0,9 | 6 Şub 2009 |
29İzleyin | CVE-2005-4317Kavram kanıtı | Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows relimbo cms · limbo cms | Orta6,8 | — | %5,2 | 17 Ara 2005 |
28İzleyin | CVE-2006-6800Kavram kanıtı | PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHlimbo cms · event module | Orta6,8 | — | %3,4 | 28 Ara 2006 |
27İzleyin | CVE-2006-2142Kavram kanıtı | PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrarylimbo cms · limbo cms | Orta6,4 | — | %8,1 | 2 May 2006 |
21İzleyin | CVE-2005-4319Kavram kanıtı | Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via limbo cms · limbo cms | Orta5,0 | — | %3,2 | 17 Ara 2005 |
21İzleyin | CVE-2006-2363Kavram kanıtı | SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL commandlimbo cms · limbo cms · CWE-16 | Orta5,1 | — | %2,3 | 15 May 2006 |
21İzleyin | CVE-2005-4320İstismar yok | Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inclimbo cms · limbo cms · CWE-200 | Orta5,0 | — | %1,8 | 17 Ara 2005 |
18İzleyin | CVE-2007-6564Kavram kanıtı | Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML vilimbo cms · limbo cms · CWE-79 | Orta4,3 | — | %1,7 | 27 Ara 2007 |
17İzleyin | CVE-2006-0934İstismar yok | Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the melimbo cms · limbo cms | Orta4,3 | — | %1,2 | 28 Şub 2006 |
- CVE-2006-486041Planlayın
Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) tree
KritikCVSS 10,0İstismar yokEPSS %3limbo cms · limbo cms19 Eyl 2006
- CVE-2006-485932İzleyin
Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and
YüksekCVSS 7,5Kavram kanıtıEPSS %7limbo cms · limbo cms19 Eyl 2006
- CVE-2006-166231İzleyin
The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in
YüksekCVSS 7,5Kavram kanıtıEPSS %3limbo cms · limbo cms7 Nis 2006
- CVE-2005-431830İzleyin
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arb
YüksekCVSS 7,5Kavram kanıtıEPSS %1limbo cms · limbo cms17 Ara 2005
- CVE-2008-073430İzleyin
SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitr
YüksekCVSS 7,5Kavram kanıtıEPSS %1limbo cms · limbo cms12 Şub 2008
- CVE-2008-607830İzleyin
SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote attackers to execute ar
YüksekCVSS 7,5Kavram kanıtıEPSS %0limbo cms · com privmsg6 Şub 2009
- CVE-2005-431729İzleyin
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modification, which allows re
OrtaCVSS 6,8Kavram kanıtıEPSS %5limbo cms · limbo cms17 Ara 2005
- CVE-2006-680028İzleyin
PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PH
OrtaCVSS 6,8Kavram kanıtıEPSS %3limbo cms · event module28 Ara 2006
- CVE-2006-214227İzleyin
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary
OrtaCVSS 6,4Kavram kanıtıEPSS %8limbo cms · limbo cms2 May 2006
- CVE-2005-431921İzleyin
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via
OrtaCVSS 5,0Kavram kanıtıEPSS %3limbo cms · limbo cms17 Ara 2005
- CVE-2006-236321İzleyin
SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL command
OrtaCVSS 5,1Kavram kanıtıEPSS %2limbo cms · limbo cms15 May 2006
- CVE-2005-432021İzleyin
Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to (1) doc.inc
OrtaCVSS 5,0İstismar yokEPSS %1limbo cms · limbo cms17 Ara 2005
- CVE-2007-656418İzleyin
Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3Kavram kanıtıEPSS %1limbo cms · limbo cms27 Ara 2007
- CVE-2006-093417İzleyin
Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the me
OrtaCVSS 4,3İstismar yokEPSS %1limbo cms · limbo cms28 Şub 2006