sblog kayıtları
sblog üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2007-1801Kavram kanıtı | Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files vsblog · sblog | Yüksek7,5 | — | %3,0 | 2 Nis 2007 |
30İzleyin | CVE-2007-5818İstismar yok | Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blockssblog · sblog · CWE-352 | Yüksek7,6 | — | %0,9 | 5 Kas 2007 |
18İzleyin | CVE-2006-1135Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1)sblog · sblog | Orta4,3 | — | %2,0 | 9 Mar 2006 |
17İzleyin | CVE-2006-0101İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web sblog · sblog · CWE-79 | Orta4,3 | — | %1,1 | 6 Oca 2006 |
17İzleyin | CVE-2007-4102İstismar yok | Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script sblog · sblog | Orta4,3 | — | %1,0 | 31 Tem 2007 |
- CVE-2007-180131İzleyin
Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files v
YüksekCVSS 7,5Kavram kanıtıEPSS %3sblog · sblog2 Nis 2007
- CVE-2007-581830İzleyin
Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks
YüksekCVSS 7,6İstismar yokEPSS %0sblog · sblog5 Kas 2007
- CVE-2006-113518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1)
OrtaCVSS 4,3Kavram kanıtıEPSS %2sblog · sblog9 Mar 2006
- CVE-2006-010117İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web
OrtaCVSS 4,3İstismar yokEPSS %1sblog · sblog6 Oca 2006
- CVE-2007-410217İzleyin
Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script
OrtaCVSS 4,3İstismar yokEPSS %1sblog · sblog31 Tem 2007