TUFaT kayıtları
tufat üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2006-7032Kavram kanıtı | PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code vtufat · flashbb | Kritik10,0 | — | %6,1 | 22 Şub 2007 |
34İzleyin | CVE-2007-3697Kavram kanıtı | PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code tufat · flashbb | Yüksek7,5 | — | %12,8 | 11 Tem 2007 |
31İzleyin | CVE-2008-6799Kavram kanıtı | connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting tufat · flashchat · CWE-264 | Yüksek7,5 | — | %2,8 | 7 May 2009 |
30İzleyin | CVE-2008-4738Kavram kanıtı | SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.tufat · mycard · CWE-89 | Yüksek7,5 | — | %1,0 | 24 Eki 2008 |
27İzleyin | CVE-2009-4977Kavram kanıtı | PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via atufat · mybackup · CWE-94 | Orta6,5 | — | %2,0 | 25 Ağu 2010 |
21İzleyin | CVE-2009-4978Kavram kanıtı | Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a ..tufat · mybackup · CWE-22 | Orta5,0 | — | %2,9 | 25 Ağu 2010 |
21İzleyin | CVE-2010-1055Kavram kanıtı | Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and register_globals is enabtufat · osdate · CWE-94 | Orta5,1 | — | %2,6 | 23 Mar 2010 |
17İzleyin | CVE-2010-1872Kavram kanıtı | Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script tufat · flashcard · CWE-79 | Orta4,3 | — | %1,6 | 12 May 2010 |
- CVE-2006-703242Planlayın
PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code v
KritikCVSS 10,0Kavram kanıtıEPSS %6tufat · flashbb22 Şub 2007
- CVE-2007-369734İzleyin
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code
YüksekCVSS 7,5Kavram kanıtıEPSS %12tufat · flashbb11 Tem 2007
- CVE-2008-679931İzleyin
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting
YüksekCVSS 7,5Kavram kanıtıEPSS %2tufat · flashchat7 May 2009
- CVE-2008-473830İzleyin
SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
YüksekCVSS 7,5Kavram kanıtıEPSS %1tufat · mycard24 Eki 2008
- CVE-2009-497727İzleyin
PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a
OrtaCVSS 6,5Kavram kanıtıEPSS %2tufat · mybackup25 Ağu 2010
- CVE-2009-497821İzleyin
Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %2tufat · mybackup25 Ağu 2010
- CVE-2010-105521İzleyin
Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and register_globals is enab
OrtaCVSS 5,1Kavram kanıtıEPSS %2tufat · osdate23 Mar 2010
- CVE-2010-187217İzleyin
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script
OrtaCVSS 4,3Kavram kanıtıEPSS %1tufat · flashcard12 May 2010