mooSocial kayıtları
moosocial üreticisine ait 19 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-15 External Control of System or Configuration Setting1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
19 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-40868Kavram kanıtı | Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Dmoosocial · moosocial · CWE-352 | Yüksek8,8 | — | %1,3 | 14 Eyl 2023 |
35İzleyin | CVE-2023-44811Kavram kanıtı | Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitivemoosocial · moosocial · CWE-352 | Yüksek8,8 | — | %1,0 | 9 Eki 2023 |
27İzleyin | CVE-2023-4174Kavram kanıtı | mooSocial mooStore cross site scriptingmoosocial · moostore · CWE-79 | Orta6,1 | — | %9,1 | 5 Ağu 2023 |
27İzleyin | CVE-2023-43323Kavram kanıtı | mooSocial 3.1.8 is vulnerable to external service interaction on post function.moosocial · moosocial · CWE-15 | Orta6,5 | — | %2,1 | 28 Eyl 2023 |
26İzleyin | CVE-2023-3847Kavram kanıtı | mooSocial mooDating URL users cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3848Kavram kanıtı | mooSocial mooDating URL view cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3849Kavram kanıtı | mooSocial mooDating URL find-a-match cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3846Kavram kanıtı | mooSocial mooDating URL pages cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3845Kavram kanıtı | mooSocial mooDating URL ajax_invite cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3843Kavram kanıtı | mooSocial mooDating URL question cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-3844Kavram kanıtı | mooSocial mooDating URL friends cross site scriptingmoosocial · moodating · CWE-79 | Orta6,1 | — | %6,0 | 23 Tem 2023 |
26İzleyin | CVE-2023-4173Kavram kanıtı | mooSocial mooStore index cross site scriptingmoosocial · moostore · CWE-79 | Orta6,1 | — | %5,4 | 5 Ağu 2023 |
25İzleyin | CVE-2023-43325Kavram kanıtı | A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'moosocial · moosocial · CWE-79 | Orta6,1 | — | %2,0 | 25 Eyl 2023 |
25İzleyin | CVE-2023-44812Kavram kanıtı | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 | Orta6,1 | — | %2,0 | 9 Eki 2023 |
25İzleyin | CVE-2023-44813Kavram kanıtı | Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 | Orta6,1 | — | %1,9 | 9 Eki 2023 |
25İzleyin | CVE-2023-43326Kavram kanıtı | A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session comoosocial · moosocial · CWE-79 | Orta6,1 | — | %1,7 | 25 Eyl 2023 |
24İzleyin | CVE-2023-45542Kavram kanıtı | Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the qmoosocial · moosocial · CWE-79 | Orta6,1 | — | %1,6 | 16 Eki 2023 |
24İzleyin | CVE-2023-40869Kavram kanıtı | Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a moosocial · moosocial · CWE-79 | Orta6,1 | — | %1,1 | 14 Eyl 2023 |
24İzleyin | CVE-2023-4175İstismar yok | mooSocial mooTravel cross site scriptingmoosocial · mootravel · CWE-79 | Orta6,1 | — | %0,4 | 5 Ağu 2023 |
- CVE-2023-4086835İzleyin
Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the D
YüksekCVSS 8,8Kavram kanıtıEPSS %1moosocial · moosocial14 Eyl 2023
- CVE-2023-4481135İzleyin
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive
YüksekCVSS 8,8Kavram kanıtıEPSS %1moosocial · moosocial9 Eki 2023
- CVE-2023-417427İzleyin
mooSocial mooStore cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %9moosocial · moostore5 Ağu 2023
- CVE-2023-4332327İzleyin
mooSocial 3.1.8 is vulnerable to external service interaction on post function.
OrtaCVSS 6,5Kavram kanıtıEPSS %2moosocial · moosocial28 Eyl 2023
- CVE-2023-384726İzleyin
mooSocial mooDating URL users cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384826İzleyin
mooSocial mooDating URL view cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384926İzleyin
mooSocial mooDating URL find-a-match cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384626İzleyin
mooSocial mooDating URL pages cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384526İzleyin
mooSocial mooDating URL ajax_invite cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384326İzleyin
mooSocial mooDating URL question cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-384426İzleyin
mooSocial mooDating URL friends cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %6moosocial · moodating23 Tem 2023
- CVE-2023-417326İzleyin
mooSocial mooStore index cross site scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %5moosocial · moostore5 Ağu 2023
- CVE-2023-4332525İzleyin
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'
OrtaCVSS 6,1Kavram kanıtıEPSS %2moosocial · moosocial25 Eyl 2023
- CVE-2023-4481225İzleyin
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
OrtaCVSS 6,1Kavram kanıtıEPSS %2moosocial · moosocial9 Eki 2023
- CVE-2023-4481325İzleyin
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
OrtaCVSS 6,1Kavram kanıtıEPSS %2moosocial · moosocial9 Eki 2023
- CVE-2023-4332625İzleyin
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session co
OrtaCVSS 6,1Kavram kanıtıEPSS %2moosocial · moosocial25 Eyl 2023
- CVE-2023-4554224İzleyin
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q
OrtaCVSS 6,1Kavram kanıtıEPSS %2moosocial · moosocial16 Eki 2023
- CVE-2023-4086924İzleyin
Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a
OrtaCVSS 6,1Kavram kanıtıEPSS %1moosocial · moosocial14 Eyl 2023
- CVE-2023-417524İzleyin
mooSocial mooTravel cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0moosocial · mootravel5 Ağu 2023