maian kayıtları
maian üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-287 Improper Authentication4
- CWE-310 Cryptographic Issues1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2012-2405İstismar yok | Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a differemaian · gallery · CWE-310 | Kritik10,0 | — | %1,1 | 22 Nis 2012 |
32İzleyin | CVE-2008-3318Kavram kanıtı | admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending amaian · weblog · CWE-287 | Yüksek7,5 | — | %8,1 | 25 Tem 2008 |
32İzleyin | CVE-2008-3319Kavram kanıtı | admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending anmaian · links · CWE-287 | Yüksek7,5 | — | %7,7 | 25 Tem 2008 |
32İzleyin | CVE-2008-3322Kavram kanıtı | admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending amaian · recipe · CWE-287 | Yüksek7,5 | — | %6,5 | 25 Tem 2008 |
32İzleyin | CVE-2008-3320Kavram kanıtı | admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sendinmaian · guestbook · CWE-287 | Yüksek7,5 | — | %6,5 | 25 Tem 2008 |
31İzleyin | CVE-2006-1259İstismar yok | Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2maian · support | Yüksek7,5 | — | %2,1 | 18 Mar 2006 |
31İzleyin | CVE-2007-2077İstismar yok | PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL inmaian · search | Yüksek7,5 | — | %1,6 | 17 Nis 2007 |
28İzleyin | CVE-2007-2076İstismar yok | PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL inmaian · gallery | Orta6,8 | — | %1,7 | 17 Nis 2007 |
28İzleyin | CVE-2007-2078İstismar yok | PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in maian · weblog | Orta6,8 | — | %1,7 | 17 Nis 2007 |
17İzleyin | CVE-2012-1113İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remotmaian · gallery · CWE-79 | Orta4,3 | — | %1,6 | 22 Nis 2012 |
- CVE-2012-240540Planlayın
Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a differe
KritikCVSS 10,0İstismar yokEPSS %1maian · gallery22 Nis 2012
- CVE-2008-331832İzleyin
admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a
YüksekCVSS 7,5Kavram kanıtıEPSS %8maian · weblog25 Tem 2008
- CVE-2008-331932İzleyin
admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an
YüksekCVSS 7,5Kavram kanıtıEPSS %7maian · links25 Tem 2008
- CVE-2008-332232İzleyin
admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending a
YüksekCVSS 7,5Kavram kanıtıEPSS %6maian · recipe25 Tem 2008
- CVE-2008-332032İzleyin
admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sendin
YüksekCVSS 7,5Kavram kanıtıEPSS %6maian · guestbook25 Tem 2008
- CVE-2006-125931İzleyin
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2
YüksekCVSS 7,5İstismar yokEPSS %2maian · support18 Mar 2006
- CVE-2007-207731İzleyin
PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in
YüksekCVSS 7,5İstismar yokEPSS %1maian · search17 Nis 2007
- CVE-2007-207628İzleyin
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in
OrtaCVSS 6,8İstismar yokEPSS %1maian · gallery17 Nis 2007
- CVE-2007-207828İzleyin
PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in
OrtaCVSS 6,8İstismar yokEPSS %1maian · weblog17 Nis 2007
- CVE-2012-111317İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remot
OrtaCVSS 4,3İstismar yokEPSS %1maian · gallery22 Nis 2012