İçeriğe atla
Noroxi

onekeyadmin kayıtları

onekeyadmin üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

8 kayıt
  • CVE-2023-26949
    39İzleyin

    An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %1

    onekeyadmin · onekeyadmin6 Mar 2023

  • CVE-2023-26957
    36İzleyin

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.

    KritikCVSS 9,1İstismar yokEPSS %1

    onekeyadmin · onekeyadmin9 Mar 2023

  • CVE-2023-26956
    30İzleyin

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.

    YüksekCVSS 7,5İstismar yokEPSS %1

    onekeyadmin · onekeyadmin8 Mar 2023

  • CVE-2023-26948
    30İzleyin

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.

    YüksekCVSS 7,5İstismar yokEPSS %1

    onekeyadmin · onekeyadmin8 Mar 2023

  • CVE-2023-26952
    21İzleyin

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.

    OrtaCVSS 5,4İstismar yokEPSS %0

    onekeyadmin · onekeyadmin8 Mar 2023

  • CVE-2023-26950
    21İzleyin

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Cate

    OrtaCVSS 5,4İstismar yokEPSS %0

    onekeyadmin · onekeyadmin8 Mar 2023

  • CVE-2023-26951
    21İzleyin

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.

    OrtaCVSS 5,4İstismar yokEPSS %0

    onekeyadmin · onekeyadmin15 Mar 2023

  • CVE-2023-26953
    19İzleyin

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.

    OrtaCVSS 4,8İstismar yokEPSS %0

    onekeyadmin · onekeyadmin7 Mar 2023