masterlab kayıtları
masterlab üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2020-23534İstismar yok | A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.masterlab · masterlab · CWE-918 | Kritik9,8 | — | %1,3 | 25 Şub 2021 |
39İzleyin | CVE-2023-7145İstismar yok | gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injectionmasterlab · masterlab · CWE-89 | Kritik9,8 | — | %0,7 | 28 Ara 2023 |
39İzleyin | CVE-2023-7146İstismar yok | gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injectionmasterlab · masterlab · CWE-89 | Kritik9,8 | — | %0,7 | 28 Ara 2023 |
39İzleyin | CVE-2023-7159İstismar yok | gopeak MasterLab User.php update unrestricted uploadmasterlab · masterlab · CWE-434 | Kritik9,8 | — | %0,6 | 29 Ara 2023 |
39İzleyin | CVE-2023-7147İstismar yok | gopeak MasterLab User.php base64ImageContent unrestricted uploadmasterlab · masterlab · CWE-434 | Kritik9,8 | — | %0,6 | 28 Ara 2023 |
39İzleyin | CVE-2023-7144İstismar yok | gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injectionmasterlab · masterlab · CWE-89 | Kritik9,8 | — | %0,6 | 28 Ara 2023 |
- CVE-2020-2353439İzleyin
A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab25 Şub 2021
- CVE-2023-714539İzleyin
gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injection
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab28 Ara 2023
- CVE-2023-714639İzleyin
gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injection
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab28 Ara 2023
- CVE-2023-715939İzleyin
gopeak MasterLab User.php update unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab29 Ara 2023
- CVE-2023-714739İzleyin
gopeak MasterLab User.php base64ImageContent unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab28 Ara 2023
- CVE-2023-714439İzleyin
gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injection
KritikCVSS 9,8İstismar yokEPSS %1masterlab · masterlab28 Ara 2023