Montala kayıtları
montala üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-20 Improper Input Validation1
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2021-41765İstismar yok | A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated attmontala · resourcespace · CWE-89 | Kritik9,8 | — | %67,8 | 15 Kas 2021 |
58Planlayın | CVE-2021-41950İstismar yok | A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on tmontala · resourcespace · CWE-22 | Kritik9,1 | — | %74,8 | 15 Kas 2021 |
47Planlayın | CVE-2021-41951Kavram kanıtı | ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php vimontala · resourcespace · CWE-79 | Orta6,1 | — | %77,8 | 15 Kas 2021 |
35İzleyin | CVE-2019-25662İstismar yok | ResourceSpace 8.6 SQL Injection via watched_searches.phpmontala · resourcespace · CWE-89 | Yüksek8,8 | — | %0,4 | 5 Nis 2026 |
32İzleyin | CVE-2015-3648Kavram kanıtı | Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include andmontala · resourcespace · CWE-22 | Yüksek7,5 | — | %8,0 | 9 Haz 2015 |
31İzleyin | CVE-2015-6915İstismar yok | SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands montala · resourcespace · CWE-89 | Yüksek7,5 | — | %1,8 | 11 Eyl 2015 |
28İzleyin | CVE-2019-25693İstismar yok | ResourceSpace 8.6 SQL Injection via collection_edit.phpmontala · resourcespace · CWE-352 | Yüksek7,1 | — | %0,1 | 12 Nis 2026 |
27İzleyin | CVE-2022-31260Kavram kanıtı | In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a nonmontala · resourcespace · CWE-306 | Orta6,5 | — | %2,0 | 17 Tem 2022 |
20İzleyin | CVE-2011-4311İstismar yok | ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictionsmontala · resourcespace · CWE-20 | Orta5,0 | — | %1,4 | 18 Kas 2011 |
- CVE-2021-4176559Planlayın
A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated att
KritikCVSS 9,8İstismar yokEPSS %67montala · resourcespace15 Kas 2021
- CVE-2021-4195058Planlayın
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on t
KritikCVSS 9,1İstismar yokEPSS %74montala · resourcespace15 Kas 2021
- CVE-2021-4195147Planlayın
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php vi
OrtaCVSS 6,1Kavram kanıtıEPSS %77montala · resourcespace15 Kas 2021
- CVE-2019-2566235İzleyin
ResourceSpace 8.6 SQL Injection via watched_searches.php
YüksekCVSS 8,8İstismar yokEPSS %0montala · resourcespace5 Nis 2026
- CVE-2015-364832İzleyin
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and
YüksekCVSS 7,5Kavram kanıtıEPSS %8montala · resourcespace9 Haz 2015
- CVE-2015-691531İzleyin
SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands
YüksekCVSS 7,5İstismar yokEPSS %1montala · resourcespace11 Eyl 2015
- CVE-2019-2569328İzleyin
ResourceSpace 8.6 SQL Injection via collection_edit.php
YüksekCVSS 7,1İstismar yokEPSS %0montala · resourcespace12 Nis 2026
- CVE-2022-3126027İzleyin
In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non
OrtaCVSS 6,5Kavram kanıtıEPSS %2montala · resourcespace17 Tem 2022
- CVE-2011-431120İzleyin
ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions
OrtaCVSS 5,0İstismar yokEPSS %1montala · resourcespace18 Kas 2011