phpicalendar kayıtları
phpicalendar üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-5967Kavram kanıtı | admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allophpicalendar · phpicalendar · CWE-287 | Yüksek7,5 | — | %3,3 | 26 Oca 2009 |
31İzleyin | CVE-2008-5840Kavram kanıtı | PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies tphpicalendar · phpicalendar · CWE-264 | Yüksek7,5 | — | %3,0 | 5 Oca 2009 |
31İzleyin | CVE-2008-5968Kavram kanıtı | Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary lophpicalendar · phpicalendar · CWE-22 | Yüksek7,5 | — | %2,9 | 26 Oca 2009 |
20İzleyin | CVE-2011-3780İstismar yok | PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatiophpicalendar · php icalendar · CWE-200 | Orta5,0 | — | %1,2 | 23 Eyl 2011 |
- CVE-2008-596731İzleyin
admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allo
YüksekCVSS 7,5Kavram kanıtıEPSS %3phpicalendar · phpicalendar26 Oca 2009
- CVE-2008-584031İzleyin
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendar_login cookies t
YüksekCVSS 7,5Kavram kanıtıEPSS %3phpicalendar · phpicalendar5 Oca 2009
- CVE-2008-596831İzleyin
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary lo
YüksekCVSS 7,5Kavram kanıtıEPSS %3phpicalendar · phpicalendar26 Oca 2009
- CVE-2011-378020İzleyin
PHP iCalendar 2.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio
OrtaCVSS 5,0İstismar yokEPSS %1phpicalendar · php icalendar23 Eyl 2011