lucidcrew kayıtları
lucidcrew üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2017-7402Kavram kanıtı | Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=flucidcrew · pixie · CWE-94 | Kritik9,8 | — | %5,0 | 3 Nis 2017 |
30İzleyin | CVE-2011-4710Kavram kanıtı | Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pgetpixie · pixie · CWE-89 | Yüksek7,5 | — | %1,6 | 8 Ara 2011 |
24İzleyin | CVE-2017-7359İstismar yok | Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.lucidcrew · pixie · CWE-79 | Orta6,1 | — | %1,1 | 31 Mar 2017 |
24İzleyin | CVE-2017-7361İstismar yok | Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.lucidcrew · pixie · CWE-79 | Orta6,1 | — | %0,8 | 31 Mar 2017 |
24İzleyin | CVE-2017-7362İstismar yok | Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.lucidcrew · pixie · CWE-79 | Orta6,1 | — | %0,8 | 31 Mar 2017 |
24İzleyin | CVE-2017-7360İstismar yok | Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.lucidcrew · pixie · CWE-79 | Orta6,1 | — | %0,7 | 31 Mar 2017 |
24İzleyin | CVE-2017-7363İstismar yok | Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.lucidcrew · pixie · CWE-79 | Orta6,1 | — | %0,7 | 31 Mar 2017 |
21İzleyin | CVE-2011-3793İstismar yok | Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path lucidcrew · pixie · CWE-200 | Orta5,0 | — | %1,9 | 23 Eyl 2011 |
17İzleyin | CVE-2014-3786İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackelucidcrew · pixie · CWE-79 | Orta4,3 | — | %1,4 | 4 Haz 2014 |
- CVE-2017-740241Planlayın
Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=f
KritikCVSS 9,8Kavram kanıtıEPSS %5lucidcrew · pixie3 Nis 2017
- CVE-2011-471030İzleyin
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) p
YüksekCVSS 7,5Kavram kanıtıEPSS %1getpixie · pixie8 Ara 2011
- CVE-2017-735924İzleyin
Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.
OrtaCVSS 6,1İstismar yokEPSS %1lucidcrew · pixie31 Mar 2017
- CVE-2017-736124İzleyin
Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.
OrtaCVSS 6,1İstismar yokEPSS %0lucidcrew · pixie31 Mar 2017
- CVE-2017-736224İzleyin
Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.
OrtaCVSS 6,1İstismar yokEPSS %0lucidcrew · pixie31 Mar 2017
- CVE-2017-736024İzleyin
Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.
OrtaCVSS 6,1İstismar yokEPSS %0lucidcrew · pixie31 Mar 2017
- CVE-2017-736324İzleyin
Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.
OrtaCVSS 6,1İstismar yokEPSS %0lucidcrew · pixie31 Mar 2017
- CVE-2011-379321İzleyin
Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path
OrtaCVSS 5,0İstismar yokEPSS %1lucidcrew · pixie23 Eyl 2011
- CVE-2014-378617İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attacke
OrtaCVSS 4,3İstismar yokEPSS %1lucidcrew · pixie4 Haz 2014