pearadmin kayıtları
pearadmin üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-29377İstismar yok | Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely.pearadmin · pearadmin think · CWE-434 | Kritik9,8 | — | %1,6 | 12 Ağu 2021 |
35İzleyin | CVE-2021-29378İstismar yok | SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request pearadmin · pear admin think · CWE-89 | Yüksek8,8 | — | %0,8 | 11 Ağu 2023 |
21İzleyin | CVE-2022-23903İstismar yok | A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary fupearadmin · pear admin think · CWE-79 | Orta5,4 | — | %0,6 | 29 Mar 2022 |
21İzleyin | CVE-2024-6241İstismar yok | Pear Admin Boot getDictItems sql injectionpearadmin · pear admin boot · CWE-89 | Orta5,3 | — | %0,5 | 21 Haz 2024 |
21İzleyin | CVE-2024-6266İstismar yok | Pear Admin Boot loadDictItem sql injectionpearadmin · pear admin boot · CWE-89 | Orta5,3 | — | %0,5 | 22 Haz 2024 |
21İzleyin | CVE-2023-30417İstismar yok | A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a cpearadmin · pear admin boot · CWE-79 | Orta5,4 | — | %0,4 | 25 Nis 2023 |
- CVE-2021-2937739İzleyin
Pear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers to execute arbitrary code remotely.
KritikCVSS 9,8İstismar yokEPSS %2pearadmin · pearadmin think12 Ağu 2021
- CVE-2021-2937835İzleyin
SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request
YüksekCVSS 8,8İstismar yokEPSS %1pearadmin · pear admin think11 Ağu 2023
- CVE-2022-2390321İzleyin
A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to access arbitrary fu
OrtaCVSS 5,4İstismar yokEPSS %1pearadmin · pear admin think29 Mar 2022
- CVE-2024-624121İzleyin
Pear Admin Boot getDictItems sql injection
OrtaCVSS 5,3İstismar yokEPSS %1pearadmin · pear admin boot21 Haz 2024
- CVE-2024-626621İzleyin
Pear Admin Boot loadDictItem sql injection
OrtaCVSS 5,3İstismar yokEPSS %1pearadmin · pear admin boot22 Haz 2024
- CVE-2023-3041721İzleyin
A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a c
OrtaCVSS 5,4İstismar yokEPSS %0pearadmin · pear admin boot25 Nis 2023