İçeriğe atla
Noroxi

Powie kayıtları

powie üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    14 kayıt
    • CVE-2002-0287
      41Planlayın

      pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain adminis

      KritikCVSS 10,0İstismar yokEPSS %2

      powie · pforum31 May 2002

    • CVE-2002-0319
      32İzleyin

      Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies f

      YüksekCVSS 7,5Kavram kanıtıEPSS %7

      powie · pforum25 Haz 2002

    • CVE-2006-6039
      30İzleyin

      SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL c

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · php matchmaker21 Kas 2006

    • CVE-2006-6038
      30İzleyin

      SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · pforum21 Kas 2006

    • CVE-2012-6524
      30İzleyin

      SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter.

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · pgb31 Oca 2013

    • CVE-2008-4355
      30İzleyin

      SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to e

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · pforum30 Eyl 2008

    • CVE-2008-2673
      30İzleyin

      SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magic_quotes_gpc is disabled, allows remote attackers to execute

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · pnews12 Haz 2008

    • CVE-2012-1210
      30İzleyin

      SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL commands via the id param

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      powie · pfile24 Şub 2012

    • CVE-2008-4357
      30İzleyin

      SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter

      YüksekCVSS 7,5Kavram kanıtıEPSS %0

      powie · plink30 Eyl 2008

    • CVE-2008-4347
      30İzleyin

      SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid para

      YüksekCVSS 7,5Kavram kanıtıEPSS %0

      powie · pnews30 Eyl 2008

    • CVE-2008-5269
      30İzleyin

      SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews para

      YüksekCVSS 7,5Kavram kanıtıEPSS %0

      powie · psys28 Kas 2008

    • CVE-2004-1716
      28İzleyin

      Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IR

      OrtaCVSS 6,8İstismar yokEPSS %2

      powie · pforum16 Ağu 2004

    • CVE-2008-3131
      27İzleyin

      SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitr

      OrtaCVSS 6,8Kavram kanıtıEPSS %0

      powie · psys10 Tem 2008

    • CVE-2012-1211
      17İzleyin

      Cross-site scripting (XSS) vulnerability in pfile/kommentar.php in Powie pFile 1.02 allows remote attackers to inject arbitrary web script o

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      powie · pfile24 Şub 2012