İçeriğe atla
Noroxi

phpkit kayıtları

phpkit üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
9
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

20 kayıt
  • CVE-2016-10758
    35İzleyin

    PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the

    YüksekCVSS 8,8İstismar yokEPSS %2

    phpkit · phpkit24 May 2019

  • CVE-2005-2683
    31İzleyin

    Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    phpkit · phpkit23 Ağu 2005

  • CVE-2005-3553
    31İzleyin

    Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL command

    YüksekCVSS 7,5İstismar yokEPSS %2

    phpkit · phpkit16 Kas 2005

  • CVE-2006-7115
    30İzleyin

    SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.

    YüksekCVSS 7,5İstismar yokEPSS %1

    phpkit · phpkit5 Mar 2007

  • CVE-2004-1538
    30İzleyin

    SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 7,5İstismar yokEPSS %1

    phpkit · phpkit31 Ara 2004

  • CVE-2007-6134
    30İzleyin

    SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpkit · phpkit27 Kas 2007

  • CVE-2007-0179
    30İzleyin

    SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpkit · phpkit10 Oca 2007

  • CVE-2003-1187
    28İzleyin

    Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script o

    OrtaCVSS 6,8Kavram kanıtıEPSS %4

    phpkit · phpkit2 Kas 2003

  • CVE-2005-4424
    27İzleyin

    Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbitrary PHP code via a

    OrtaCVSS 6,5İstismar yokEPSS %2

    phpkit · phpkit20 Ara 2005

  • CVE-2006-1507
    27İzleyin

    Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error param

    OrtaCVSS 6,8İstismar yokEPSS %1

    phpkit · phpkit29 Mar 2006

  • CVE-2008-7193
    27İzleyin

    PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by r

    OrtaCVSS 6,8İstismar yokEPSS %1

    phpkit · phpkit9 Eyl 2009

  • CVE-2006-0785
    25İzleyin

    Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute ar

    OrtaCVSS 6,4İstismar yokEPSS %2

    phpkit · phpkit19 Şub 2006

  • CVE-2006-1773
    25İzleyin

    SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbitrary SQL commands v

    OrtaCVSS 6,4Kavram kanıtıEPSS %1

    phpkit · phpkit13 Nis 2006

  • CVE-2005-3554
    21İzleyin

    Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote

    OrtaCVSS 5,1İstismar yokEPSS %3

    phpkit · phpkit16 Kas 2005

  • CVE-2006-0786
    21İzleyin

    Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attacke

    OrtaCVSS 5,1Kavram kanıtıEPSS %2

    phpkit · phpkit19 Şub 2006

  • CVE-2005-3552
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3İstismar yokEPSS %2

    phpkit · phpkit16 Kas 2005

  • CVE-2015-1052
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web

    OrtaCVSS 4,3İstismar yokEPSS %2

    phpkit · phpkit15 Oca 2015

  • CVE-2004-1537
    18İzleyin

    Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    phpkit · phpkit31 Ara 2004

  • CVE-2005-2699
    18İzleyin

    Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PH

    OrtaCVSS 4,6İstismar yokEPSS %0

    phpkit · phpkit26 Ağu 2005

  • CVE-2004-1879
    17İzleyin

    Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum me

    OrtaCVSS 4,3İstismar yokEPSS %1

    phpkit · phpkit31 Ara 2004