sapplica kayıtları
sapplica üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')10
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-15873İstismar yok | A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.sapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %1,1 | 28 Ağu 2018 |
39İzleyin | CVE-2024-29875İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,9 | 21 Mar 2024 |
39İzleyin | CVE-2024-29874İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,9 | 21 Mar 2024 |
39İzleyin | CVE-2024-29871İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,9 | 21 Mar 2024 |
39İzleyin | CVE-2024-29870İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,9 | 21 Mar 2024 |
39İzleyin | CVE-2024-29876İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,8 | 21 Mar 2024 |
39İzleyin | CVE-2024-29873İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,8 | 21 Mar 2024 |
39İzleyin | CVE-2024-29872İstismar yok | SQL injection vulnerability in Sentrifugosapplica · sentrifugo · CWE-89 | Kritik9,8 | — | %0,8 | 21 Mar 2024 |
35İzleyin | CVE-2020-26804İstismar yok | In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab.sapplica · sentrifugo · CWE-434 | Yüksek8,8 | — | %1,4 | 12 Kas 2020 |
35İzleyin | CVE-2020-26803İstismar yok | In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab.sapplica · sentrifugo · CWE-434 | Yüksek8,8 | — | %1,4 | 12 Kas 2020 |
35İzleyin | CVE-2023-29770İstismar yok | In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filsapplica · sentrifugo · CWE-434 | Yüksek8,8 | — | %0,9 | 27 Kas 2023 |
35İzleyin | CVE-2019-16059İstismar yok | Sentrifugo 3.2 lacks CSRF protection.sapplica · sentrifugo · CWE-352 | Yüksek8,8 | — | %0,6 | 6 Eyl 2019 |
28İzleyin | CVE-2020-26805İstismar yok | In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2.sapplica · sentrifugo · CWE-89 | Yüksek7,2 | — | %1,5 | 12 Kas 2020 |
26İzleyin | CVE-2020-10218İstismar yok | A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the Holidasapplica · sentrifugo · CWE-89 | Orta6,5 | — | %1,2 | 13 Mar 2020 |
24İzleyin | CVE-2020-28365İstismar yok | Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during tsapplica · sentrifugo · CWE-79 | Orta6,1 | — | %0,7 | 30 Ara 2020 |
24İzleyin | CVE-2024-29877İstismar yok | Cross-Site Scripting (XSS) vulnerability in Sentrifugosapplica · sentrifugo · CWE-79 | Orta6,1 | — | %0,5 | 21 Mar 2024 |
24İzleyin | CVE-2024-29878İstismar yok | Cross-Site Scripting (XSS) vulnerability in Sentrifugosapplica · sentrifugo · CWE-79 | Orta6,1 | — | %0,5 | 21 Mar 2024 |
24İzleyin | CVE-2024-29879İstismar yok | Cross-Site Scripting (XSS) vulnerability in Sentrifugosapplica · sentrifugo · CWE-79 | Orta6,1 | — | %0,5 | 21 Mar 2024 |
- CVE-2018-1587339İzleyin
A SQL Injection issue was discovered in Sentrifugo 3.2 via the deptid parameter.
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo28 Ağu 2018
- CVE-2024-2987539İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987439İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987139İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987039İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987639İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987339İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987239İzleyin
SQL injection vulnerability in Sentrifugo
KritikCVSS 9,8İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2020-2680435İzleyin
In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab.
YüksekCVSS 8,8İstismar yokEPSS %1sapplica · sentrifugo12 Kas 2020
- CVE-2020-2680335İzleyin
In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab.
YüksekCVSS 8,8İstismar yokEPSS %1sapplica · sentrifugo12 Kas 2020
- CVE-2023-2977035İzleyin
In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension fil
YüksekCVSS 8,8İstismar yokEPSS %1sapplica · sentrifugo27 Kas 2023
- CVE-2019-1605935İzleyin
Sentrifugo 3.2 lacks CSRF protection.
YüksekCVSS 8,8İstismar yokEPSS %1sapplica · sentrifugo6 Eyl 2019
- CVE-2020-2680528İzleyin
In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2.
YüksekCVSS 7,2İstismar yokEPSS %2sapplica · sentrifugo12 Kas 2020
- CVE-2020-1021826İzleyin
A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the Holida
OrtaCVSS 6,5İstismar yokEPSS %1sapplica · sentrifugo13 Mar 2020
- CVE-2020-2836524İzleyin
Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during t
OrtaCVSS 6,1İstismar yokEPSS %1sapplica · sentrifugo30 Ara 2020
- CVE-2024-2987724İzleyin
Cross-Site Scripting (XSS) vulnerability in Sentrifugo
OrtaCVSS 6,1İstismar yokEPSS %1sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987824İzleyin
Cross-Site Scripting (XSS) vulnerability in Sentrifugo
OrtaCVSS 6,1İstismar yokEPSS %0sapplica · sentrifugo21 Mar 2024
- CVE-2024-2987924İzleyin
Cross-Site Scripting (XSS) vulnerability in Sentrifugo
OrtaCVSS 6,1İstismar yokEPSS %0sapplica · sentrifugo21 Mar 2024