sitebar kayıtları
sitebar üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2007-5491İstismar yok | Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbsitebar · sitebar · CWE-22 | Kritik9,0 | — | %2,3 | 17 Eki 2007 |
30İzleyin | CVE-2007-2088İstismar yok | Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a Usitebar · sitebar | Yüksek7,5 | — | %1,6 | 18 Nis 2007 |
29İzleyin | CVE-2007-5694Kavram kanıtı | Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read sitebar · sitebar · CWE-22 | Orta6,8 | — | %7,6 | 29 Eki 2007 |
26İzleyin | CVE-2007-5693Kavram kanıtı | Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrsitebar · sitebar · CWE-94 | Orta6,0 | — | %5,1 | 29 Eki 2007 |
26İzleyin | CVE-2007-5695İstismar yok | Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in thsitebar · sitebar · CWE-59 | Orta6,4 | — | %2,2 | 29 Eki 2007 |
18İzleyin | CVE-2007-5692Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) tsitebar · sitebar · CWE-79 | Orta4,3 | — | %4,8 | 29 Eki 2007 |
18İzleyin | CVE-2007-5492İstismar yok | Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to executesitebar · sitebar · CWE-94 | Orta4,6 | — | %1,4 | 17 Eki 2007 |
11İzleyin | CVE-2006-3320İstismar yok | Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script sitebar · sitebar | Düşük2,6 | — | %2,1 | 29 Haz 2006 |
- CVE-2007-549137İzleyin
Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arb
KritikCVSS 9,0İstismar yokEPSS %2sitebar · sitebar17 Eki 2007
- CVE-2007-208830İzleyin
Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a U
YüksekCVSS 7,5İstismar yokEPSS %2sitebar · sitebar18 Nis 2007
- CVE-2007-569429İzleyin
Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read
OrtaCVSS 6,8Kavram kanıtıEPSS %8sitebar · sitebar29 Eki 2007
- CVE-2007-569326İzleyin
Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitr
OrtaCVSS 6,0Kavram kanıtıEPSS %5sitebar · sitebar29 Eki 2007
- CVE-2007-569526İzleyin
Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in th
OrtaCVSS 6,4İstismar yokEPSS %2sitebar · sitebar29 Eki 2007
- CVE-2007-569218İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) t
OrtaCVSS 4,3Kavram kanıtıEPSS %5sitebar · sitebar29 Eki 2007
- CVE-2007-549218İzleyin
Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute
OrtaCVSS 4,6İstismar yokEPSS %1sitebar · sitebar17 Eki 2007
- CVE-2006-332011İzleyin
Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script
DüşükCVSS 2,6İstismar yokEPSS %2sitebar · sitebar29 Haz 2006