phpkobo kayıtları

phpkobo üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 16
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2023-41449İstismar yok	An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.phpkobo · ajaxnewsticker · CWE-918 pre-auth RCE SSRF	Kritik9,8	—	%1,4	27 Eyl 2023
35İzleyin	CVE-2023-41450İstismar yok	An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.phpkobo · ajaxnewsticker · CWE-94 pre-auth RCE	Yüksek8,8	—	%1,2	27 Eyl 2023
35İzleyin	CVE-2023-41452İstismar yok	Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted pphpkobo · ajaxnewsticker · CWE-352 pre-auth RCE CSRF	Yüksek8,8	—	%0,5	27 Eyl 2023
28İzleyin	CVE-2010-1057Kavram kanıtı	Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is disabled, allow remotephpkobo · adfreely · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%2,4	23 Mar 2010
28İzleyin	CVE-2010-1058Kavram kanıtı	Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allophpkobo · address book script · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%2,3	23 Mar 2010
28İzleyin	CVE-2010-1062Kavram kanıtı	Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disaphpkobo · free real estate contact form script · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%1,9	23 Mar 2010
28İzleyin	CVE-2010-1060Kavram kanıtı	Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote atphpkobo · short url · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%1,9	23 Mar 2010
27İzleyin	CVE-2010-1063İstismar yok	Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote phpkobo · free real estate contact form script · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%1,4	23 Mar 2010
27İzleyin	CVE-2010-1061İstismar yok	Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to includephpkobo · short url · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%1,4	23 Mar 2010
27İzleyin	CVE-2010-1059İstismar yok	Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allowsphpkobo · address book script · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%1,3	23 Mar 2010
24İzleyin	CVE-2023-41448İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payloadphpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,7	27 Eyl 2023
24İzleyin	CVE-2023-41446İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script phpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,7	27 Eyl 2023
24İzleyin	CVE-2023-41447İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payloadphpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,7	27 Eyl 2023
24İzleyin	CVE-2023-41451İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payloadphpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,7	27 Eyl 2023
24İzleyin	CVE-2023-41453İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payloadphpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,7	27 Eyl 2023
24İzleyin	CVE-2023-41445İstismar yok	Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payloadphpkobo · ajaxnewsticker · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,6	27 Eyl 2023
14İzleyin	CVE-2023-5313İstismar yok	phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique actionphpkobo · ajax poll script · CWE-837 Kimlik doğrulamasız	Düşük3,7	—	%0,5	30 Eyl 2023

CVE-2023-41449
39İzleyin
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- SSRF
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41450
35İzleyin
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41452
35İzleyin
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted p
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- CSRF
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2010-1057
28İzleyin
Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is disabled, allow remote
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- pre-auth RCE
- Yol geçişi
phpkobo · adfreely23 Mar 2010
CVE-2010-1058
28İzleyin
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allo
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- pre-auth RCE
- Yol geçişi
phpkobo · address book script23 Mar 2010
CVE-2010-1062
28İzleyin
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disa
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- pre-auth RCE
- Yol geçişi
phpkobo · free real estate contact form script23 Mar 2010
CVE-2010-1060
28İzleyin
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote at
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- pre-auth RCE
- Yol geçişi
phpkobo · short url23 Mar 2010
CVE-2010-1063
27İzleyin
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote
OrtaCVSS 6,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
phpkobo · free real estate contact form script23 Mar 2010
CVE-2010-1061
27İzleyin
Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include
OrtaCVSS 6,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
phpkobo · short url23 Mar 2010
CVE-2010-1059
27İzleyin
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows
OrtaCVSS 6,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
phpkobo · address book script23 Mar 2010
CVE-2023-41448
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41446
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41447
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41451
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41453
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-41445
24İzleyin
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
phpkobo · ajaxnewsticker27 Eyl 2023
CVE-2023-5313
14İzleyin
phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action
DüşükCVSS 3,7İstismar yokEPSS %0
- Kimlik doğrulamasız
phpkobo · ajax poll script30 Eyl 2023