refbase kayıtları

refbase üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 4
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2015-6008Kavram kanıtı	install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassworrefbase · refbase · CWE-78 pre-auth RCE Komut enjeksiyonu	Yüksek7,5	—	%4,8	27 Eyl 2015
31İzleyin	CVE-2015-7381Kavram kanıtı	Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackerefbase · refbase · CWE-94 pre-auth RCE	Yüksek7,5	—	%3,2	27 Eyl 2015
30İzleyin	CVE-2015-6009Kavram kanıtı	Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQLrefbase · refbase · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,5	27 Eyl 2015
30İzleyin	CVE-2015-7382Kavram kanıtı	SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrarrefbase · refbase · CWE-89 pre-auth RCE SQL enjeksiyonu	Yüksek7,5	—	%1,5	27 Eyl 2015
27İzleyin	CVE-2015-6007İstismar yok	Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the refbase · refbase · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%0,7	27 Eyl 2015
23İzleyin	CVE-2015-6012İstismar yok	Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remotrefbase · refbase Kimlik doğrulamasız Açık yönlendirme	Orta5,8	—	%1,2	27 Eyl 2015
20İzleyin	CVE-2015-6011İstismar yok	Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attarefbase · refbase Kimlik doğrulamasız	Orta5,0	—	%1,2	27 Eyl 2015
17İzleyin	CVE-2015-7383İstismar yok	Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-refbase · refbase · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,2	27 Eyl 2015
17İzleyin	CVE-2015-6010İstismar yok	Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-0refbase · refbase · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,2	27 Eyl 2015
17İzleyin	CVE-2008-6400İstismar yok	Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the headrefbase · refbase · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,0	5 Mar 2009

CVE-2015-6008
31İzleyin
install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPasswor
YüksekCVSS 7,5Kavram kanıtıEPSS %5
- pre-auth RCE
- Komut enjeksiyonu
refbase · refbase27 Eyl 2015
CVE-2015-7381
31İzleyin
Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attacke
YüksekCVSS 7,5Kavram kanıtıEPSS %3
- pre-auth RCE
refbase · refbase27 Eyl 2015
CVE-2015-6009
30İzleyin
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary SQL
YüksekCVSS 7,5Kavram kanıtıEPSS %2
- pre-auth RCE
- SQL enjeksiyonu
refbase · refbase27 Eyl 2015
CVE-2015-7382
30İzleyin
SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrar
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
refbase · refbase27 Eyl 2015
CVE-2015-6007
27İzleyin
Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack the
OrtaCVSS 6,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
refbase · refbase27 Eyl 2015
CVE-2015-6012
23İzleyin
Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow remot
OrtaCVSS 5,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Açık yönlendirme
refbase · refbase27 Eyl 2015
CVE-2015-6011
20İzleyin
Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection atta
OrtaCVSS 5,0İstismar yokEPSS %1
- Kimlik doğrulamasız
refbase · refbase27 Eyl 2015
CVE-2015-7383
17İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge through 2015-04-
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
refbase · refbase27 Eyl 2015
CVE-2015-6010
17İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-0
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
refbase · refbase27 Eyl 2015
CVE-2008-6400
17İzleyin
Cross-site scripting (XSS) vulnerability in refbase before 0.9.5 allows remote attackers to inject arbitrary web script or HTML via the head
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
refbase · refbase5 Mar 2009