tp-shop kayıtları
tp-shop üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-9919İstismar yok | A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive inftp-shop · tp-shop · CWE-918 | Kritik9,8 | — | %4,7 | 2 May 2018 |
40Planlayın | CVE-2017-16614İstismar yok | SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts,tp-shop · tpshop · CWE-918 | Kritik9,8 | — | %2,9 | 30 Mar 2018 |
39İzleyin | CVE-2020-18164İstismar yok | SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.tp-shop · tp-shop · CWE-89 | Kritik9,8 | — | %1,1 | 17 Ağu 2021 |
- CVE-2018-991940Planlayın
A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive inf
KritikCVSS 9,8İstismar yokEPSS %5tp-shop · tp-shop2 May 2018
- CVE-2017-1661440Planlayın
SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts,
KritikCVSS 9,8İstismar yokEPSS %3tp-shop · tpshop30 Mar 2018
- CVE-2020-1816439İzleyin
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
KritikCVSS 9,8İstismar yokEPSS %1tp-shop · tp-shop17 Ağu 2021