qianfox kayıtları
qianfox üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-266 Incorrect Privilege Assignment2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-45238İstismar yok | foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.qianfox · foxcms · CWE-22 | Kritik9,1 | — | %0,6 | 5 May 2025 |
27İzleyin | CVE-2024-12901İstismar yok | FoxCMS API Endpoint Site.php improper authorizationqianfox · foxcms · CWE-266 | Orta6,9 | — | %0,6 | 22 Ara 2024 |
26İzleyin | CVE-2025-45240İstismar yok | foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.qianfox · foxcms · CWE-89 | Orta6,5 | — | %0,3 | 5 May 2025 |
22İzleyin | CVE-2025-51650İstismar yok | An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary coqianfox · foxcms · CWE-77 | Orta5,6 | — | %0,3 | 14 Tem 2025 |
21İzleyin | CVE-2024-12900İstismar yok | FoxCMS Configuration File installdb.php code injectionqianfox · foxcms · CWE-74 | Orta5,3 | — | %0,7 | 22 Ara 2024 |
21İzleyin | CVE-2025-45239İstismar yok | An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.qianfox · foxcms · CWE-22 | Orta5,3 | — | %0,7 | 5 May 2025 |
21İzleyin | CVE-2025-2653İstismar yok | FoxCMS improper authorizationqianfox · foxcms · CWE-266 | Orta5,3 | — | %0,3 | 23 Mar 2025 |
8İzleyin | CVE-2025-7568İstismar yok | qianfox FoxCMS Video.php batchCope sql injectionqianfox · foxcms · CWE-74 | Düşük2,1 | — | %0,4 | 14 Tem 2025 |
8İzleyin | CVE-2025-6094İstismar yok | qianfox FoxCMS Download.php batchCope sql injectionqianfox · foxcms · CWE-74 | Düşük2,1 | — | %0,4 | 15 Haz 2025 |
8İzleyin | CVE-2025-11306İstismar yok | qianfox FoxCMS Search cross site scriptingqianfox · foxcms · CWE-79 | Düşük2,1 | — | %0,3 | 5 Eki 2025 |
- CVE-2025-4523836İzleyin
foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.
KritikCVSS 9,1İstismar yokEPSS %0qianfox · foxcms5 May 2025
- CVE-2024-1290127İzleyin
FoxCMS API Endpoint Site.php improper authorization
OrtaCVSS 6,9İstismar yokEPSS %0qianfox · foxcms22 Ara 2024
- CVE-2025-4524026İzleyin
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.
OrtaCVSS 6,5İstismar yokEPSS %0qianfox · foxcms5 May 2025
- CVE-2025-5165022İzleyin
An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary co
OrtaCVSS 5,6İstismar yokEPSS %0qianfox · foxcms14 Tem 2025
- CVE-2024-1290021İzleyin
FoxCMS Configuration File installdb.php code injection
OrtaCVSS 5,3İstismar yokEPSS %0qianfox · foxcms22 Ara 2024
- CVE-2025-4523921İzleyin
An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.
OrtaCVSS 5,3İstismar yokEPSS %0qianfox · foxcms5 May 2025
- CVE-2025-265321İzleyin
FoxCMS improper authorization
OrtaCVSS 5,3İstismar yokEPSS %0qianfox · foxcms23 Mar 2025
- CVE-2025-75688İzleyin
qianfox FoxCMS Video.php batchCope sql injection
DüşükCVSS 2,1İstismar yokEPSS %0qianfox · foxcms14 Tem 2025
- CVE-2025-60948İzleyin
qianfox FoxCMS Download.php batchCope sql injection
DüşükCVSS 2,1İstismar yokEPSS %0qianfox · foxcms15 Haz 2025
- CVE-2025-113068İzleyin
qianfox FoxCMS Search cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0qianfox · foxcms5 Eki 2025