phpcityportal kayıtları
phpcityportal üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2017-15970Kavram kanıtı | PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.phpcityportal · phpcityportal · CWE-89 | Kritik9,8 | — | %2,2 | 29 Eki 2017 |
31İzleyin | CVE-2010-0975Kavram kanıtı | PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in phpcityportal · phpcityportal · CWE-94 | Yüksek7,5 | — | %2,9 | 16 Mar 2010 |
30İzleyin | CVE-2010-0974Kavram kanıtı | Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)phpcityportal · phpcityportal · CWE-89 | Yüksek7,5 | — | %0,9 | 16 Mar 2010 |
30İzleyin | CVE-2009-4870Kavram kanıtı | Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the (1) rephpcityportal · phpcityportal · CWE-89 | Yüksek7,5 | — | %0,9 | 11 May 2010 |
17İzleyin | CVE-2010-2318İstismar yok | Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTMLphpcityportal · phpcityportal · CWE-79 | Orta4,3 | — | %0,8 | 17 Haz 2010 |
- CVE-2017-1597040Planlayın
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %2phpcityportal · phpcityportal29 Eki 2017
- CVE-2010-097531İzleyin
PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in
YüksekCVSS 7,5Kavram kanıtıEPSS %2phpcityportal · phpcityportal16 Mar 2010
- CVE-2010-097430İzleyin
Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)
YüksekCVSS 7,5Kavram kanıtıEPSS %0phpcityportal · phpcityportal16 Mar 2010
- CVE-2009-487030İzleyin
Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the (1) re
YüksekCVSS 7,5Kavram kanıtıEPSS %0phpcityportal · phpcityportal11 May 2010
- CVE-2010-231817İzleyin
Cross-site scripting (XSS) vulnerability in cms_data.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %0phpcityportal · phpcityportal17 Haz 2010