SiberianCMS kayıtları
siberiancms üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-274 Improper Handling of Insufficient Privileges1
- CWE-284 Improper Access Control1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-39375İstismar yok | SiberianCMS - CWE-274: Improper Handling of Insufficient Privilegessiberiancms · siberiancms · CWE-274 | Kritik9,8 | — | %0,8 | 27 Eyl 2023 |
39İzleyin | CVE-2024-41702İstismar yok | SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')siberiancms · siberiancms · CWE-89 | Kritik9,8 | — | %0,5 | 30 Tem 2024 |
35İzleyin | CVE-2023-39378İstismar yok | SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated usersiberiancms · siberiancms · CWE-89 | Yüksek8,8 | — | %0,9 | 27 Eyl 2023 |
28İzleyin | CVE-2023-39377İstismar yok | SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetsiberiancms · siberiancms · CWE-434 | Yüksek7,2 | — | %1,0 | 27 Eyl 2023 |
26İzleyin | CVE-2023-39376İstismar yok | SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the networksiberiancms · siberiancms · CWE-284 | Orta6,5 | — | %0,4 | 27 Eyl 2023 |
24İzleyin | CVE-2017-6906İstismar yok | An issue was discovered in SiberianCMS before 4.10.0.siberiancms · siberiancms · CWE-79 | Orta6,1 | — | %0,7 | 14 Mar 2017 |
21İzleyin | CVE-2025-1105İstismar yok | SiberianCMS HTTP GET Request flat cross site scriptingsiberiancms · siberiancms · CWE-79 | Orta5,3 | — | %0,4 | 7 Şub 2025 |
- CVE-2023-3937539İzleyin
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
KritikCVSS 9,8İstismar yokEPSS %1siberiancms · siberiancms27 Eyl 2023
- CVE-2024-4170239İzleyin
SiberianCMS – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
KritikCVSS 9,8İstismar yokEPSS %0siberiancms · siberiancms30 Tem 2024
- CVE-2023-3937835İzleyin
SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user
YüksekCVSS 8,8İstismar yokEPSS %1siberiancms · siberiancms27 Eyl 2023
- CVE-2023-3937728İzleyin
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filet
YüksekCVSS 7,2İstismar yokEPSS %1siberiancms · siberiancms27 Eyl 2023
- CVE-2023-3937626İzleyin
SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
OrtaCVSS 6,5İstismar yokEPSS %0siberiancms · siberiancms27 Eyl 2023
- CVE-2017-690624İzleyin
An issue was discovered in SiberianCMS before 4.10.0.
OrtaCVSS 6,1İstismar yokEPSS %1siberiancms · siberiancms14 Mar 2017
- CVE-2025-110521İzleyin
SiberianCMS HTTP GET Request flat cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0siberiancms · siberiancms7 Şub 2025