İçeriğe atla
Noroxi

Pagekit kayıtları

pagekit üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%15,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2022-38916
    44Planlayın

    A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

    KritikCVSS 9,8İstismar yokEPSS %18

    pagekit · pagekit20 Eyl 2022

  • CVE-2021-44135
    39İzleyin

    pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.

    KritikCVSS 9,8İstismar yokEPSS %2

    pagekit · pagekit1 Nis 2022

  • CVE-2025-67164
    39İzleyin

    An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute ar

    KritikCVSS 9,9İstismar yokEPSS %1

    pagekit · pagekit17 Ara 2025

  • CVE-2025-67165
    39İzleyin

    An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.

    KritikCVSS 9,8İstismar yokEPSS %0

    pagekit · pagekit17 Ara 2025

  • CVE-2019-19013
    35İzleyin

    A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request.

    YüksekCVSS 8,8İstismar yokEPSS %1

    pagekit · pagekit22 Kas 2019

  • CVE-2017-5594
    32İzleyin

    An issue was discovered in Pagekit CMS before 1.0.11.

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    pagekit · pagekit25 Oca 2017

  • CVE-2023-41005
    31İzleyin

    An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in U

    YüksekCVSS 7,8İstismar yokEPSS %1

    pagekit · pagekit28 Ağu 2023

  • CVE-2018-14381
    24İzleyin

    Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pagekit · pagekit18 Tem 2018

  • CVE-2022-36573
    24İzleyin

    A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted pa

    OrtaCVSS 6,1İstismar yokEPSS %1

    pagekit · pagekit28 Ağu 2022

  • CVE-2019-16669
    21İzleyin

    The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is e

    OrtaCVSS 5,3İstismar yokEPSS %1

    pagekit · pagekit21 Eyl 2019

  • CVE-2021-32245
    21İzleyin

    In PageKit v1.0.18, a user can upload SVG files in the file upload portion of the CMS.

    OrtaCVSS 5,4İstismar yokEPSS %1

    pagekit · pagekit16 Haz 2021

  • CVE-2018-11564
    20İzleyin

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature.

    OrtaCVSS 4,8Kavram kanıtıEPSS %3

    pagekit · pagekit1 Haz 2018

  • CVE-2024-45967
    18İzleyin

    Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.

    OrtaCVSS 4,7İstismar yokEPSS %0

    pagekit · pagekit1 Eki 2024