İçeriğe atla
Noroxi

oretnom23 kayıtları

oretnom23 üreticisine ait 761 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %0,3
Pre-auth RCE
46
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

761 kayıt
  • CVE-2022-40471
    60Bu hafta

    Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture uploa

    KritikCVSS 9,8SilahlaştırılmışEPSS %28

    oretnom23 · clinic\'s patient management system31 Eki 2022

  • CVE-2024-0264
    44Planlayın

    SourceCodester Clinic Queuing System LoginRegistration.php authorization

    KritikCVSS 9,8İstismar yokEPSS %18

    oretnom23 · clinic queuing system7 Oca 2024

  • CVE-2021-42580
    42Planlayın

    Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and au

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    oretnom23 · online learning system15 Kas 2021

  • CVE-2024-0265
    41Planlayın

    SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

    YüksekCVSS 8,8İstismar yokEPSS %20

    oretnom23 · clinic queuing system7 Oca 2024

  • CVE-2021-44653
    41Planlayın

    Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    oretnom23 · online magazine management system15 Ara 2021

  • CVE-2021-43140
    40Planlayın

    SQL Injection vulnerability exists in Sourcecodester.

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    oretnom23 · simple subscription website3 Kas 2021

  • CVE-2023-1826
    40Planlayın

    SourceCodester Online Computer and Laptop Store index.php unrestricted upload

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    oretnom23 · online computer and laptop store4 Nis 2023

  • CVE-2023-33592
    40Planlayın

    Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=syste

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    oretnom23 · lost and found information system28 Haz 2023

  • CVE-2022-2297
    40Planlayın

    SourceCodester Clinics Patient Management System unrestricted upload

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    oretnom23 · clinic\'s patient management system12 Tem 2022

  • CVE-2023-34581
    40Planlayın

    Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    oretnom23 · service provider management system12 Haz 2023

  • CVE-2021-40247
    40Planlayın

    SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL c

    KritikCVSS 9,8İstismar yokEPSS %2

    oretnom23 · budget and expense tracker system21 Oca 2022

  • CVE-2022-26645
    40Planlayın

    A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted P

    KritikCVSS 9,8İstismar yokEPSS %2

    oretnom23 · banking system30 Mar 2022

  • CVE-2021-41644
    40Planlayın

    Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that by

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    oretnom23 · online food ordering system29 Eki 2021

  • CVE-2024-34833
    40Planlayın

    Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    oretnom23 · payroll management system17 Haz 2024

  • CVE-2022-26283
    39İzleyin

    Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · simple subscription website21 Mar 2022

  • CVE-2021-46200
    39İzleyin

    An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · simple music cloud community system21 Oca 2022

  • CVE-2021-46309
    39İzleyin

    An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · employee and visitor gate pass logging system21 Oca 2022

  • CVE-2023-31857
    39İzleyin

    Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · online computer and laptop store16 May 2023

  • CVE-2023-38965
    39İzleyin

    Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · lost and found information system3 Kas 2023

  • CVE-2022-36270
    39İzleyin

    Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · clinic\'s patient management system10 Ağu 2022

  • CVE-2023-43457
    39İzleyin

    An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · service provider management system25 Eyl 2023

  • CVE-2024-3376
    39İzleyin

    SourceCodester Computer Laboratory Management System config.php redirect

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · computer laboratory management system6 Nis 2024

  • CVE-2023-31704
    39İzleyin

    Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate priv

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    oretnom23 · online computer and laptop store13 Tem 2023

  • CVE-2022-27304
    39İzleyin

    Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · student grading system5 Nis 2022

  • CVE-2021-45252
    39İzleyin

    Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_to

    KritikCVSS 9,8İstismar yokEPSS %1

    oretnom23 · simple forum\/discussion system21 Ara 2021