PhpMyBackupPro kayıtları
phpmybackuppro üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-20 Improper Input Validation1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2015-3638İstismar yok | phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injectinphpmybackuppro · phpmybackuppro · CWE-94 | Yüksek8,8 | — | %2,1 | 21 Tem 2017 |
36İzleyin | CVE-2015-3639İstismar yok | phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP cophpmybackuppro · phpmybackuppro · CWE-20 | Yüksek8,8 | — | %2,0 | 21 Tem 2017 |
33İzleyin | CVE-2015-4181Kavram kanıtı | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a ..phpmybackuppro · phpmybackuppro · CWE-22 | Yüksek7,5 | — | %11,6 | 25 Ağu 2017 |
32İzleyin | CVE-2015-3637İstismar yok | SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commanphpmybackuppro · phpmybackuppro · CWE-89 | Yüksek8,1 | — | %1,4 | 27 Ara 2017 |
31İzleyin | CVE-2015-4180İstismar yok | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a ..phpmybackuppro · phpmybackuppro · CWE-22 | Yüksek7,5 | — | %2,9 | 25 Ağu 2017 |
30İzleyin | CVE-2015-3640İstismar yok | phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users witphpmybackuppro · phpmybackuppro · CWE-94 | Yüksek7,5 | — | %1,2 | 21 Tem 2017 |
28İzleyin | CVE-2024-5415İstismar yok | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | Yüksek7,1 | — | %0,3 | 28 May 2024 |
28İzleyin | CVE-2024-5414İstismar yok | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | Yüksek7,1 | — | %0,3 | 28 May 2024 |
24İzleyin | CVE-2024-5413İstismar yok | Cross-Site Scripting (XSS) vulnerability on PhpMyBackupProphpmybackuppro · phpmybackuppro · CWE-79 | Orta6,1 | — | %0,3 | 28 May 2024 |
22İzleyin | CVE-2009-4050Kavram kanıtı | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traverphpmybackuppro · phpmybackuppro · CWE-22 | Orta5,0 | — | %8,1 | 23 Kas 2009 |
- CVE-2015-363836İzleyin
phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injectin
YüksekCVSS 8,8İstismar yokEPSS %2phpmybackuppro · phpmybackuppro21 Tem 2017
- CVE-2015-363936İzleyin
phpMyBackupPro 2.5 and earlier does not properly sanitize input strings, which allows remote authenticated users to execute arbitrary PHP co
YüksekCVSS 8,8İstismar yokEPSS %2phpmybackuppro · phpmybackuppro21 Tem 2017
- CVE-2015-418133İzleyin
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a ..
YüksekCVSS 7,5Kavram kanıtıEPSS %12phpmybackuppro · phpmybackuppro25 Ağu 2017
- CVE-2015-363732İzleyin
SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL comman
YüksekCVSS 8,1İstismar yokEPSS %1phpmybackuppro · phpmybackuppro27 Ara 2017
- CVE-2015-418031İzleyin
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a ..
YüksekCVSS 7,5İstismar yokEPSS %3phpmybackuppro · phpmybackuppro25 Ağu 2017
- CVE-2015-364030İzleyin
phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users wit
YüksekCVSS 7,5İstismar yokEPSS %1phpmybackuppro · phpmybackuppro21 Tem 2017
- CVE-2024-541528İzleyin
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
YüksekCVSS 7,1İstismar yokEPSS %0phpmybackuppro · phpmybackuppro28 May 2024
- CVE-2024-541428İzleyin
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
YüksekCVSS 7,1İstismar yokEPSS %0phpmybackuppro · phpmybackuppro28 May 2024
- CVE-2024-541324İzleyin
Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
OrtaCVSS 6,1İstismar yokEPSS %0phpmybackuppro · phpmybackuppro28 May 2024
- CVE-2009-405022İzleyin
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traver
OrtaCVSS 5,0Kavram kanıtıEPSS %8phpmybackuppro · phpmybackuppro23 Kas 2009