mrcms kayıtları

mrcms üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2026-31272İstismar yok	MRCMS 3.1.2 contains an access control vulnerability.mrcms · mrcms · CWE-284 Kimlik doğrulamasız Kimlik doğrulama atlatma Erişim denetimi (IDOR)	Kritik9,8	—	%0,6	7 Nis 2026
35İzleyin	CVE-2024-48177İstismar yok	MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do.mrcms · mrcms · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,4	28 Eki 2024
30İzleyin	CVE-2024-24161İstismar yok	MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered.mrcms · mrcms · CWE-552 Kimlik doğrulamasız	Yüksek7,5	—	%0,7	2 Şub 2024
26İzleyin	CVE-2024-25428İstismar yok	SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.mrcms · mrcms · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Orta6,5	—	%0,4	20 Şub 2024
21İzleyin	CVE-2025-2193İstismar yok	MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversalmrcms · mrcms · CWE-22 Yol geçişi	Orta5,3	—	%0,8	11 Mar 2025
21İzleyin	CVE-2026-29909Kavram kanıtı	MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.mrcms · mrcms · CWE-20 Kimlik doğrulamasız	Orta5,3	—	%0,5	30 Mar 2026
21İzleyin	CVE-2024-24160İstismar yok	MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.mrcms · mrcms · CWE-79 XSS	Orta5,4	—	%0,4	2 Şub 2024
21İzleyin	CVE-2025-25768İstismar yok	MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.javmrcms · mrcms · CWE-77 pre-auth RCE Komut enjeksiyonu SSTI	Orta5,4	—	%0,3	21 Şub 2025
21İzleyin	CVE-2025-4327İstismar yok	MRCMS cross-site request forgerymrcms · mrcms · CWE-352 Kimlik doğrulamasız CSRF	Orta5,3	—	%0,3	6 May 2025
20İzleyin	CVE-2025-2196İstismar yok	MRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta5,1	—	%0,4	11 Mar 2025
20İzleyin	CVE-2025-2194İstismar yok	MRCMS org.marker.mushroom.controller.FileController list.do list cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta5,1	—	%0,4	11 Mar 2025
20İzleyin	CVE-2025-2195İstismar yok	MRCMS org.marker.mushroom.controller.FileController rename.do rename cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta5,1	—	%0,4	11 Mar 2025
19İzleyin	CVE-2025-4325İstismar yok	MRCMS Category Management Page add.do cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,4	6 May 2025
19İzleyin	CVE-2025-25767İstismar yok	A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarimrcms · mrcms · CWE-266 Kimlik doğrulamasız	Orta4,8	—	%0,3	21 Şub 2025
19İzleyin	CVE-2025-25766İstismar yok	An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uplmrcms · mrcms · CWE-77 pre-auth RCE Dosya yükleme Komut enjeksiyonu	Orta4,8	—	%0,3	21 Şub 2025
19İzleyin	CVE-2025-4324İstismar yok	MRCMS External Link Management Page edit.do cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,3	6 May 2025
19İzleyin	CVE-2025-4292İstismar yok	MRCMS Edit User Page edit.do cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,3	5 May 2025
19İzleyin	CVE-2025-4326İstismar yok	MRCMS Add Fragment Page add.do cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,3	6 May 2025
19İzleyin	CVE-2025-4293İstismar yok	MRCMS Group Edit Page edit.do cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,3	5 May 2025
19İzleyin	CVE-2025-4323İstismar yok	MRCMS Edit Article Page cross site scriptingmrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,3	6 May 2025
19İzleyin	CVE-2025-50581İstismar yok	MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.mrcms · mrcms · CWE-79 XSS	Orta4,8	—	%0,2	18 Tem 2025
16İzleyin	CVE-2025-25765İstismar yok	MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do.mrcms · mrcms	Orta4,0	—	%0,2	21 Şub 2025

CVE-2026-31272
39İzleyin
MRCMS 3.1.2 contains an access control vulnerability.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Erişim denetimi (IDOR)
mrcms · mrcms7 Nis 2026
CVE-2024-48177
35İzleyin
MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
mrcms · mrcms28 Eki 2024
CVE-2024-24161
30İzleyin
MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
mrcms · mrcms2 Şub 2024
CVE-2024-25428
26İzleyin
SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
mrcms · mrcms20 Şub 2024
CVE-2025-2193
21İzleyin
MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversal
OrtaCVSS 5,3İstismar yokEPSS %1
- Yol geçişi
mrcms · mrcms11 Mar 2025
CVE-2026-29909
21İzleyin
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.
OrtaCVSS 5,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
mrcms · mrcms30 Mar 2026
CVE-2024-24160
21İzleyin
MRCMS 3.0 contains a Cross-Site Scripting (XSS) vulnerability via /admin/system/saveinfo.do.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
mrcms · mrcms2 Şub 2024
CVE-2025-25768
21İzleyin
MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.jav
OrtaCVSS 5,4İstismar yokEPSS %0
- pre-auth RCE
- Komut enjeksiyonu
- SSTI
mrcms · mrcms21 Şub 2025
CVE-2025-4327
21İzleyin
MRCMS cross-site request forgery
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
mrcms · mrcms6 May 2025
CVE-2025-2196
20İzleyin
MRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
mrcms · mrcms11 Mar 2025
CVE-2025-2194
20İzleyin
MRCMS org.marker.mushroom.controller.FileController list.do list cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
mrcms · mrcms11 Mar 2025
CVE-2025-2195
20İzleyin
MRCMS org.marker.mushroom.controller.FileController rename.do rename cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
mrcms · mrcms11 Mar 2025
CVE-2025-4325
19İzleyin
MRCMS Category Management Page add.do cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms6 May 2025
CVE-2025-25767
19İzleyin
A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrari
OrtaCVSS 4,8İstismar yokEPSS %0
- Kimlik doğrulamasız
mrcms · mrcms21 Şub 2025
CVE-2025-25766
19İzleyin
An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via upl
OrtaCVSS 4,8İstismar yokEPSS %0
- pre-auth RCE
- Dosya yükleme
- Komut enjeksiyonu
mrcms · mrcms21 Şub 2025
CVE-2025-4324
19İzleyin
MRCMS External Link Management Page edit.do cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms6 May 2025
CVE-2025-4292
19İzleyin
MRCMS Edit User Page edit.do cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms5 May 2025
CVE-2025-4326
19İzleyin
MRCMS Add Fragment Page add.do cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms6 May 2025
CVE-2025-4293
19İzleyin
MRCMS Group Edit Page edit.do cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms5 May 2025
CVE-2025-4323
19İzleyin
MRCMS Edit Article Page cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms6 May 2025
CVE-2025-50581
19İzleyin
MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do.
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
mrcms · mrcms18 Tem 2025
CVE-2025-25765
16İzleyin
MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do.
OrtaCVSS 4,0İstismar yokEPSS %0
mrcms · mrcms21 Şub 2025