picturespro kayıtları
picturespro üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-565 Reliance on Cookies without Validation and Integrity Checking1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-5190İstismar yok | PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified coopicturespro · picturespro · CWE-565 | Kritik9,8 | — | %1,3 | 17 Nis 2018 |
31İzleyin | CVE-2006-6093Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitrapicturespro · picturespro photo cart | Yüksek7,5 | — | %2,7 | 24 Kas 2006 |
27İzleyin | CVE-2008-3788Kavram kanıtı | Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute apicturespro · picturespro photo cart · CWE-89 | Orta6,8 | — | %1,0 | 26 Ağu 2008 |
17İzleyin | CVE-2008-3786Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script opicturespro · picturespro photo cart · CWE-79 | Orta4,3 | — | %1,4 | 26 Ağu 2008 |
17İzleyin | CVE-2008-1536İstismar yok | Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject arpicturespro · picturespro photo cart · CWE-79 | Orta4,3 | — | %1,0 | 28 Mar 2008 |
- CVE-2018-519039İzleyin
PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified coo
KritikCVSS 9,8İstismar yokEPSS %1picturespro · picturespro17 Nis 2018
- CVE-2006-609331İzleyin
Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitra
YüksekCVSS 7,5Kavram kanıtıEPSS %2picturespro · picturespro photo cart24 Kas 2006
- CVE-2008-378827İzleyin
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote attackers to execute a
OrtaCVSS 6,8Kavram kanıtıEPSS %1picturespro · picturespro photo cart26 Ağu 2008
- CVE-2008-378617İzleyin
Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script o
OrtaCVSS 4,3Kavram kanıtıEPSS %1picturespro · picturespro photo cart26 Ağu 2008
- CVE-2008-153617İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject ar
OrtaCVSS 4,3İstismar yokEPSS %1picturespro · picturespro photo cart28 Mar 2008