phpvibe kayıtları
phpvibe üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-39171İstismar yok | Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writinphpvibe · phpvibe · CWE-22 | Kritik9,8 | — | %1,2 | 9 Tem 2024 |
22İzleyin | CVE-2015-5399Kavram kanıtı | Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML viaphpvibe · phpvibe · CWE-79 | Orta5,4 | — | %1,9 | 26 Ağu 2016 |
21İzleyin | CVE-2024-6083İstismar yok | PHPVibe Media Upload Page upload-mp3.php unrestricted uploadphpvibe · phpvibe · CWE-434 | Orta5,3 | — | %0,5 | 17 Haz 2024 |
20İzleyin | CVE-2024-6082İstismar yok | PHPVibe Global Options Page functionalities.global.php cross site scriptingphpvibe · phpvibe · CWE-79 | Orta5,1 | — | %0,4 | 17 Haz 2024 |
- CVE-2024-3917139İzleyin
Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writin
KritikCVSS 9,8İstismar yokEPSS %1phpvibe · phpvibe9 Tem 2024
- CVE-2015-539922İzleyin
Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via
OrtaCVSS 5,4Kavram kanıtıEPSS %2phpvibe · phpvibe26 Ağu 2016
- CVE-2024-608321İzleyin
PHPVibe Media Upload Page upload-mp3.php unrestricted upload
OrtaCVSS 5,3İstismar yokEPSS %0phpvibe · phpvibe17 Haz 2024
- CVE-2024-608220İzleyin
PHPVibe Global Options Page functionalities.global.php cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0phpvibe · phpvibe17 Haz 2024