İçeriğe atla
Noroxi

scilico kayıtları

scilico üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2018-1000124
    41Planlayın

    I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplex

    KritikCVSS 10,0İstismar yokEPSS %1

    scilico · i\, librarian13 Mar 2018

  • CVE-2017-1000235
    40Planlayın

    I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised.

    KritikCVSS 9,8İstismar yokEPSS %3

    scilico · i\, librarian17 Kas 2017

  • CVE-2017-1000237
    39İzleyin

    I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able

    KritikCVSS 9,8İstismar yokEPSS %1

    scilico · i\, librarian17 Kas 2017

  • CVE-2018-1000138
    36İzleyin

    I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the

    KritikCVSS 9,1İstismar yokEPSS %1

    scilico · i\, librarian23 Mar 2018

  • CVE-2018-1000141
    36İzleyin

    I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users g

    KritikCVSS 9,1İstismar yokEPSS %1

    scilico · i\, librarian23 Mar 2018

  • CVE-2018-1000137
    35İzleyin

    I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password

    YüksekCVSS 8,8İstismar yokEPSS %0

    scilico · i\, librarian23 Mar 2018

  • CVE-2024-40500
    34İzleyin

    Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the

    YüksekCVSS 8,6İstismar yokEPSS %0

    scilico · i\, librarian12 Ağu 2024

  • CVE-2011-4333
    25İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    scilico · labwiki23 Eki 2017

  • CVE-2019-11359
    24İzleyin

    Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 6,1İstismar yokEPSS %1

    scilico · i\, librarian19 Nis 2019

  • CVE-2018-1000139
    24İzleyin

    I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.php that can result in

    OrtaCVSS 6,1İstismar yokEPSS %0

    scilico · i\, librarian23 Mar 2018

  • CVE-2019-11428
    24İzleyin

    I, Librarian 4.10 has XSS via the export.php export_files parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    scilico · i\, librarian22 Nis 2019

  • CVE-2019-11449
    24İzleyin

    I, Librarian 4.10 has XSS via the notes.php notes parameter.

    OrtaCVSS 6,1İstismar yokEPSS %0

    scilico · i\, librarian22 Nis 2019

  • CVE-2017-1000236
    24İzleyin

    I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inje

    OrtaCVSS 6,1İstismar yokEPSS %0

    scilico · i\, librarian17 Kas 2017

  • CVE-2017-1000234
    21İzleyin

    I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating director

    OrtaCVSS 5,3İstismar yokEPSS %1

    scilico · i\, librarian17 Kas 2017

  • CVE-2023-3021
    21İzleyin

    Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

    OrtaCVSS 5,4İstismar yokEPSS %0

    scilico · i\, librarian31 May 2023