İçeriğe atla
Noroxi

neocrome kayıtları

neocrome üreticisine ait 24 yayımlanmış kayıt.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
13
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    24 kayıt
    • CVE-2006-6268
      41Planlayın

      SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authentic

      KritikCVSS 10,0İstismar yokEPSS %2

      neocrome · land down under4 Ara 2006

    • CVE-2005-2788
      31İzleyin

      Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      neocrome · land down under2 Eyl 2005

    • CVE-2005-4821
      31İzleyin

      Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands vi

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      neocrome · land down under31 Ara 2005

    • CVE-2009-1411
      31İzleyin

      SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitra

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      neocrome · seditio24 Nis 2009

    • CVE-2004-2669
      31İzleyin

      Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the

      YüksekCVSS 7,5İstismar yokEPSS %1

      neocrome · land down under31 Ara 2004

    • CVE-2006-6177
      30İzleyin

      SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated user

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      neocrome · seditio30 Kas 2006

    • CVE-2003-1315
      30İzleyin

      SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute arbitrary SQL commands.

      YüksekCVSS 7,5İstismar yokEPSS %1

      neocrome · land down under31 Ara 2003

    • CVE-2005-2675
      30İzleyin

      Note: the vendor has disputed this issue.

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      neocrome · land down under23 Ağu 2005

    • CVE-2006-6835
      30İzleyin

      SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrar

      YüksekCVSS 7,5İstismar yokEPSS %1

      neocrome · land down under31 Ara 2006

    • CVE-2006-6344
      30İzleyin

      Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipse

      YüksekCVSS 7,5İstismar yokEPSS %0

      neocrome · seditio6 Ara 2006

    • CVE-2007-6202
      28İzleyin

      SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrar

      OrtaCVSS 6,8Kavram kanıtıEPSS %2

      neocrome · seditio1 Ara 2007

    • CVE-2007-4057
      27İzleyin

      Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users to upload arbitrary

      OrtaCVSS 6,5Kavram kanıtıEPSS %2

      neocrome · seditio30 Tem 2007

    • CVE-2006-6343
      27İzleyin

      SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      neocrome · seditio6 Ara 2006

    • CVE-2005-4711
      27İzleyin

      SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Refe

      OrtaCVSS 6,8İstismar yokEPSS %1

      neocrome · land down under31 Ara 2005

    • CVE-2006-6577
      27İzleyin

      SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      neocrome · land down under15 Ara 2006

    • CVE-2006-2096
      20İzleyin

      plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invalid (1) month or (2) ye

      OrtaCVSS 5,0İstismar yokEPSS %1

      neocrome · land down under29 Nis 2006

    • CVE-2012-5916
      20İzleyin

      Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-16

      OrtaCVSS 5,0İstismar yokEPSS %1

      neocrome · seditio17 Kas 2012

    • CVE-2012-5915
      20İzleyin

      Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1) view.php, (2) plugi

      OrtaCVSS 5,0İstismar yokEPSS %1

      neocrome · seditio17 Kas 2012

    • CVE-2004-2038
      18İzleyin

      Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or H

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      neocrome · land down under29 May 2004

    • CVE-2005-2674
      18İzleyin

      Note: the vendor has disputed this issue.

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      neocrome · land down under23 Ağu 2005

    • CVE-2006-2634
      17İzleyin

      Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitra

      OrtaCVSS 4,3İstismar yokEPSS %1

      neocrome · seditio30 May 2006

    • CVE-2005-2884
      17İzleyin

      Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary

      OrtaCVSS 4,3İstismar yokEPSS %1

      neocrome · land down under14 Eyl 2005

    • CVE-2005-2780
      17İzleyin

      Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signa

      OrtaCVSS 4,3İstismar yokEPSS %0

      neocrome · land down under2 Eyl 2005

    • CVE-2012-5914
      10İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161

      DüşükCVSS 2,6İstismar yokEPSS %1

      neocrome · seditio17 Kas 2012