tribiq kayıtları
tribiq üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-6804Kavram kanıtı | Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USERtribiq · tribiq cms · CWE-287 | Yüksek7,5 | — | %2,5 | 11 May 2009 |
30İzleyin | CVE-2012-5312Kavram kanıtı | SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.tribiq · tribiq cms · CWE-89 | Yüksek7,5 | — | %1,1 | 8 Eki 2012 |
30İzleyin | CVE-2008-5960İstismar yok | SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commantribiq · tribiq cms · CWE-89 | Yüksek7,5 | — | %1,0 | 23 Oca 2009 |
21İzleyin | CVE-2008-4894Kavram kanıtı | Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_glotribiq · tribiq cms · CWE-22 | Orta5,1 | — | %1,9 | 3 Kas 2008 |
21İzleyin | CVE-2009-2220Kavram kanıtı | Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allowtribiq · tribiq cms · CWE-22 | Orta5,1 | — | %1,9 | 26 Haz 2009 |
17İzleyin | CVE-2011-2727İstismar yok | The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMStribiq · tribiq cms · CWE-200 | Orta4,3 | — | %1,5 | 29 Ara 2014 |
17İzleyin | CVE-2008-5961İstismar yok | Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrartribiq · tribiq cms · CWE-79 | Orta4,3 | — | %0,8 | 23 Oca 2009 |
10İzleyin | CVE-2008-4893Kavram kanıtı | Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registribiq · tribiq cms · CWE-79 | Düşük2,6 | — | %1,4 | 3 Kas 2008 |
- CVE-2008-680431İzleyin
Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER
YüksekCVSS 7,5Kavram kanıtıEPSS %2tribiq · tribiq cms11 May 2009
- CVE-2012-531230İzleyin
SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
YüksekCVSS 7,5Kavram kanıtıEPSS %1tribiq · tribiq cms8 Eki 2012
- CVE-2008-596030İzleyin
SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL comman
YüksekCVSS 7,5İstismar yokEPSS %1tribiq · tribiq cms23 Oca 2009
- CVE-2008-489421İzleyin
Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_glo
OrtaCVSS 5,1Kavram kanıtıEPSS %1tribiq · tribiq cms3 Kas 2008
- CVE-2009-222021İzleyin
Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow
OrtaCVSS 5,1Kavram kanıtıEPSS %1tribiq · tribiq cms26 Haz 2009
- CVE-2011-272717İzleyin
The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS
OrtaCVSS 4,3İstismar yokEPSS %1tribiq · tribiq cms29 Ara 2014
- CVE-2008-596117İzleyin
Cross-site scripting (XSS) vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrar
OrtaCVSS 4,3İstismar yokEPSS %0tribiq · tribiq cms23 Oca 2009
- CVE-2008-489310İzleyin
Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when regis
DüşükCVSS 2,6Kavram kanıtıEPSS %1tribiq · tribiq cms3 Kas 2008