onlinegrades kayıtları
onlinegrades üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2009-0479Kavram kanıtı | Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commaonlinegrades · online grades · CWE-89 | Yüksek7,5 | — | %0,9 | 8 Şub 2009 |
28İzleyin | CVE-2009-2037Kavram kanıtı | Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is eonlinegrades · online grades · CWE-22 | Orta6,8 | — | %2,1 | 12 Haz 2009 |
28İzleyin | CVE-2009-0452Kavram kanıtı | Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attackeronlinegrades · online grades · CWE-89 | Orta6,8 | — | %1,9 | 10 Şub 2009 |
26İzleyin | CVE-2009-2598Kavram kanıtı | Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL conlinegrades · online grades · CWE-89 | Orta6,5 | — | %0,9 | 27 Tem 2009 |
21İzleyin | CVE-2009-0453Kavram kanıtı | Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfoonlinegrades · online grades · CWE-200 | Orta5,0 | — | %2,6 | 10 Şub 2009 |
- CVE-2009-047930İzleyin
Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL comma
YüksekCVSS 7,5Kavram kanıtıEPSS %1onlinegrades · online grades8 Şub 2009
- CVE-2009-203728İzleyin
Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when register_globals is e
OrtaCVSS 6,8Kavram kanıtıEPSS %2onlinegrades · online grades12 Haz 2009
- CVE-2009-045228İzleyin
Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magic_quotes_gpc is disabled, allow remote attacker
OrtaCVSS 6,8Kavram kanıtıEPSS %2onlinegrades · online grades10 Şub 2009
- CVE-2009-259826İzleyin
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to execute arbitrary SQL c
OrtaCVSS 6,5Kavram kanıtıEPSS %1onlinegrades · online grades27 Tem 2009
- CVE-2009-045321İzleyin
Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo
OrtaCVSS 5,0Kavram kanıtıEPSS %3onlinegrades · online grades10 Şub 2009