teacms project kayıtları
teacms project üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-24 Path Traversal: '../filedir'1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-1483İstismar yok | XiaoBingBy TeaCMS getallarticleinfo sql injectionteacms project · teacms · CWE-89 | Kritik9,8 | — | %0,6 | 18 Mar 2023 |
35İzleyin | CVE-2023-1398İstismar yok | XiaoBingBy TeaCMS upload path traversalteacms project · teacms · CWE-24 | Yüksek8,8 | — | %0,9 | 14 Mar 2023 |
28İzleyin | CVE-2023-27091İstismar yok | An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).teacms project · teacms · CWE-287 | Yüksek7,2 | — | %0,7 | 4 Nis 2023 |
21İzleyin | CVE-2023-1616İstismar yok | XiaoBingBy TeaCMS Article Title cross site scriptingteacms project · teacms · CWE-79 | Orta5,4 | — | %0,4 | 24 Mar 2023 |
21İzleyin | CVE-2023-27090İstismar yok | Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title pateacms project · teacms · CWE-79 | Orta5,4 | — | %0,4 | 20 Nis 2023 |
21İzleyin | CVE-2025-5033İstismar yok | XiaoBingby TeaCMS addUser cross-site request forgeryteacms project · teacms · CWE-352 | Orta5,3 | — | %0,2 | 21 May 2025 |
- CVE-2023-148339İzleyin
XiaoBingBy TeaCMS getallarticleinfo sql injection
KritikCVSS 9,8İstismar yokEPSS %0teacms project · teacms18 Mar 2023
- CVE-2023-139835İzleyin
XiaoBingBy TeaCMS upload path traversal
YüksekCVSS 8,8İstismar yokEPSS %0teacms project · teacms14 Mar 2023
- CVE-2023-2709128İzleyin
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).
YüksekCVSS 7,2İstismar yokEPSS %0teacms project · teacms4 Nis 2023
- CVE-2023-161621İzleyin
XiaoBingBy TeaCMS Article Title cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %0teacms project · teacms24 Mar 2023
- CVE-2023-2709021İzleyin
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title pa
OrtaCVSS 5,4İstismar yokEPSS %0teacms project · teacms20 Nis 2023
- CVE-2025-503321İzleyin
XiaoBingby TeaCMS addUser cross-site request forgery
OrtaCVSS 5,3İstismar yokEPSS %0teacms project · teacms21 May 2025