İçeriğe atla
Noroxi

taogogo kayıtları

taogogo üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

25 kayıt
  • CVE-2022-36262
    40Planlayın

    An issue was discovered in taocms 3.0.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms15 Ağu 2022

  • CVE-2024-33350
    40Planlayın

    Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms29 Nis 2024

  • CVE-2022-25578
    40Planlayın

    taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms18 Mar 2022

  • CVE-2022-23880
    40Planlayın

    An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code vi

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms23 Mar 2022

  • CVE-2019-7720
    39İzleyin

    taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php reques

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms11 Şub 2019

  • CVE-2022-46998
    39İzleyin

    An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms26 Oca 2023

  • CVE-2021-45014
    39İzleyin

    There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms14 Ara 2021

  • CVE-2021-46204
    39İzleyin

    Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms19 Oca 2022

  • CVE-2022-25505
    39İzleyin

    Taocms v3.0.2 was discovered to contain a SQL injection vulnerability via the id parameter in \include\Model\Category.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms20 Mar 2022

  • CVE-2023-1947
    39İzleyin

    taoCMS admin.php code injection

    KritikCVSS 9,8İstismar yokEPSS %1

    taogogo · taocms7 Nis 2023

  • CVE-2022-48006
    39İzleyin

    An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.

    KritikCVSS 9,8İstismar yokEPSS %0

    taogogo · taocms30 Oca 2023

  • CVE-2021-45015
    37İzleyin

    taocms 3.0.2 is vulnerable to arbitrary file deletion via taocms\include\Model\file.php from line 60 to line 72.

    KritikCVSS 9,1İstismar yokEPSS %1

    taogogo · taocms14 Ara 2021

  • CVE-2022-36261
    36İzleyin

    An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admi

    KritikCVSS 9,1İstismar yokEPSS %1

    taogogo · taocms23 Ağu 2022

  • CVE-2022-23380
    35İzleyin

    There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.

    YüksekCVSS 8,8İstismar yokEPSS %0

    taogogo · taocms1 Mar 2022

  • CVE-2021-34167
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via taocms/admin/admin.

    YüksekCVSS 8,8İstismar yokEPSS %0

    taogogo · taocms24 Şub 2023

  • CVE-2021-25784
    28İzleyin

    Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.

    YüksekCVSS 7,2İstismar yokEPSS %1

    taogogo · taocms2 Ara 2021

  • CVE-2021-25783
    28İzleyin

    Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.

    YüksekCVSS 7,2İstismar yokEPSS %1

    taogogo · taocms2 Ara 2021

  • CVE-2021-44915
    28İzleyin

    Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category.

    YüksekCVSS 7,2İstismar yokEPSS %0

    taogogo · taocms5 Tem 2022

  • CVE-2021-46203
    26İzleyin

    Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.

    OrtaCVSS 6,5İstismar yokEPSS %1

    taogogo · taocms19 Oca 2022

  • CVE-2020-20725
    24İzleyin

    Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in ad

    OrtaCVSS 6,1İstismar yokEPSS %0

    taogogo · taocms20 Haz 2023

  • CVE-2023-34654
    24İzleyin

    taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 6,1İstismar yokEPSS %0

    taogogo · taocms5 Tem 2023

  • CVE-2021-44983
    19İzleyin

    In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.

    OrtaCVSS 4,9İstismar yokEPSS %1

    taogogo · taocms4 Şub 2022

  • CVE-2022-23316
    19İzleyin

    An issue was discovered in taoCMS v3.0.2.

    OrtaCVSS 4,9İstismar yokEPSS %1

    taogogo · taocms4 Şub 2022

  • CVE-2021-25785
    19İzleyin

    Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column.

    OrtaCVSS 4,8İstismar yokEPSS %0

    taogogo · taocms2 Ara 2021

  • CVE-2021-44969
    19İzleyin

    Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component.

    OrtaCVSS 4,8İstismar yokEPSS %0

    taogogo · taocms10 Şub 2022