spotweb project kayıtları

spotweb project üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2020-35545Kavram kanıtı	Time-based SQL injection exists in Spotweb 1.4.9 via the query string.spotweb project · spotweb · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%3,8	17 Ara 2020
39İzleyin	CVE-2021-3286İstismar yok	SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload maspotweb project · spotweb · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,0	26 Oca 2021
25İzleyin	CVE-2021-43725Kavram kanıtı	There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to injecspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,5	28 Mar 2022
25İzleyin	CVE-2021-40972Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
25İzleyin	CVE-2021-40973Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
25İzleyin	CVE-2021-40970Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
25İzleyin	CVE-2021-40968Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
25İzleyin	CVE-2021-40971Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
25İzleyin	CVE-2021-40969Kavram kanıtı	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to injectspotweb project · spotweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%2,2	1 Eki 2021
21İzleyin	CVE-2021-33966İstismar yok	Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request spotweb project · spotweb · CWE-79 RCE XSS	Orta5,4	—	%0,8	21 Oca 2022

CVE-2020-35545
40Planlayın
Time-based SQL injection exists in Spotweb 1.4.9 via the query string.
KritikCVSS 9,8Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- SQL enjeksiyonu
spotweb project · spotweb17 Ara 2020
CVE-2021-3286
39İzleyin
SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload ma
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
spotweb project · spotweb26 Oca 2021
CVE-2021-43725
25İzleyin
There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to injec
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb28 Mar 2022
CVE-2021-40972
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-40973
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-40970
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-40968
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-40971
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-40969
25İzleyin
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject
OrtaCVSS 6,1Kavram kanıtıEPSS %2
- Kimlik doğrulamasız
- XSS
spotweb project · spotweb1 Eki 2021
CVE-2021-33966
21İzleyin
Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
spotweb project · spotweb21 Oca 2022