İçeriğe atla
Noroxi

tincan kayıtları

tincan üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    17 kayıt
    • CVE-2009-0422
      32İzleyin

      Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote

      YüksekCVSS 7,5Kavram kanıtıEPSS %6

      tincan · phplist4 Şub 2009

    • CVE-2005-2432
      30İzleyin

      SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) membe

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      tincan · phplist3 Ağu 2005

    • CVE-2006-5322
      30İzleyin

      Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vec

      YüksekCVSS 7,5İstismar yokEPSS %1

      tincan · phplist17 Eki 2006

    • CVE-2011-0748
      27İzleyin

      Multiple cross-site request forgery (CSRF) vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of

      OrtaCVSS 6,8Kavram kanıtıEPSS %1

      tincan · phplist13 Nis 2011

    • CVE-2005-3555
      26İzleyin

      Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administrator privileges to e

      OrtaCVSS 6,5Kavram kanıtıEPSS %1

      tincan · phplist16 Kas 2005

    • CVE-2008-5887
      23İzleyin

      phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a "local file include vulnerability."

      OrtaCVSS 5,0İstismar yokEPSS %11

      tincan · phplist12 Oca 2009

    • CVE-2005-2433
      21İzleyin

      PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php

      OrtaCVSS 5,0İstismar yokEPSS %3

      tincan · phplist3 Ağu 2005

    • CVE-2006-1746
      21İzleyin

      Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS

      OrtaCVSS 5,0İstismar yokEPSS %2

      tincan · phplist12 Nis 2006

    • CVE-2005-3557
      21İzleyin

      Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access arbitrary files via

      OrtaCVSS 5,0İstismar yokEPSS %2

      tincan · phplist16 Kas 2005

    • CVE-2007-4073
      20İzleyin

      Webbler CMS before 3.1.6 does not properly restrict use of "mail a friend" forms, which allows remote attackers to send arbitrary amounts of

      OrtaCVSS 5,0İstismar yokEPSS %1

      tincan · webbler cms30 Tem 2007

    • CVE-2007-4072
      20İzleyin

      Webbler CMS before 3.1.6 provides the full installation path within HTML comments in certain documents, which allows remote attackers to obt

      OrtaCVSS 5,0İstismar yokEPSS %1

      tincan · webbler cms30 Tem 2007

    • CVE-2005-3556
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or H

      OrtaCVSS 4,3Kavram kanıtıEPSS %3

      tincan · phplist16 Kas 2005

    • CVE-2006-5294
      18İzleyin

      Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitrary web script or HTM

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      tincan · phplist16 Eki 2006

    • CVE-2012-5228
      17İzleyin

      Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions before 2.10.19 allows re

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      tincan · phplist1 Eki 2012

    • CVE-2007-4071
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbit

      OrtaCVSS 4,3İstismar yokEPSS %1

      tincan · webbler cms30 Tem 2007

    • CVE-2006-5321
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML v

      OrtaCVSS 4,3İstismar yokEPSS %1

      tincan · phplist17 Eki 2006

    • CVE-2011-1682
      17İzleyin

      Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and earlier allow remote attackers to hijack the authenticatio

      OrtaCVSS 4,3Kavram kanıtıEPSS %0

      tincan · phplist13 Nis 2011