quickersite kayıtları
quickersite üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-20 Improper Input Validation1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-6677Kavram kanıtı | Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attacquickersite · quickersite · CWE-94 | Yüksek7,5 | — | %4,0 | 8 Nis 2009 |
31İzleyin | CVE-2008-6673Kavram kanıtı | asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1quickersite · quickersite · CWE-264 | Yüksek7,5 | — | %2,3 | 8 Nis 2009 |
30İzleyin | CVE-2008-6678Kavram kanıtı | SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via tquickersite · quickersite · CWE-89 | Yüksek7,5 | — | %1,1 | 8 Nis 2009 |
21İzleyin | CVE-2008-6676Kavram kanıtı | QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which revequickersite · quickersite · CWE-20 | Orta5,0 | — | %3,0 | 8 Nis 2009 |
21İzleyin | CVE-2008-6674Kavram kanıtı | mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modifquickersite · quickersite · CWE-264 | Orta5,0 | — | %2,7 | 8 Nis 2009 |
18İzleyin | CVE-2007-3940İstismar yok | Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML quickersite · quickersite | Orta4,3 | — | %1,7 | 20 Tem 2007 |
18İzleyin | CVE-2008-6675Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (quickersite · quickersite · CWE-79 | Orta4,3 | — | %1,7 | 8 Nis 2009 |
- CVE-2008-667731İzleyin
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attac
YüksekCVSS 7,5Kavram kanıtıEPSS %4quickersite · quickersite8 Nis 2009
- CVE-2008-667331İzleyin
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1
YüksekCVSS 7,5Kavram kanıtıEPSS %2quickersite · quickersite8 Nis 2009
- CVE-2008-667830İzleyin
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via t
YüksekCVSS 7,5Kavram kanıtıEPSS %1quickersite · quickersite8 Nis 2009
- CVE-2008-667621İzleyin
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reve
OrtaCVSS 5,0Kavram kanıtıEPSS %3quickersite · quickersite8 Nis 2009
- CVE-2008-667421İzleyin
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modif
OrtaCVSS 5,0Kavram kanıtıEPSS %3quickersite · quickersite8 Nis 2009
- CVE-2007-394018İzleyin
Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %2quickersite · quickersite20 Tem 2007
- CVE-2008-667518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (
OrtaCVSS 4,3Kavram kanıtıEPSS %2quickersite · quickersite8 Nis 2009