tuzicms kayıtları
tuzicms üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2019-16644İstismar yok | App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.tuzicms · tuzicms · CWE-89 | Kritik9,8 | — | %1,3 | 20 Eyl 2019 |
39İzleyin | CVE-2022-23882İstismar yok | TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.tuzicms · tuzicms · CWE-89 | Kritik9,8 | — | %1,0 | 28 Mar 2022 |
39İzleyin | CVE-2022-46999İstismar yok | Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php.tuzicms · tuzicms · CWE-89 | Kritik9,8 | — | %0,9 | 26 Oca 2023 |
35İzleyin | CVE-2019-16658İstismar yok | TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.tuzicms · tuzicms · CWE-352 | Yüksek8,8 | — | %0,5 | 21 Eyl 2019 |
35İzleyin | CVE-2019-16659İstismar yok | TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.tuzicms · tuzicms · CWE-352 | Yüksek8,8 | — | %0,5 | 21 Eyl 2019 |
35İzleyin | CVE-2018-10185İstismar yok | An issue was discovered in TuziCMS v2.0.6.tuzicms · tuzicms · CWE-352 | Yüksek8,8 | — | %0,5 | 17 Nis 2018 |
24İzleyin | CVE-2019-16657İstismar yok | TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.tuzicms · tuzicms · CWE-79 | Orta6,1 | — | %0,7 | 21 Eyl 2019 |
- CVE-2019-1664439İzleyin
App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.
KritikCVSS 9,8İstismar yokEPSS %1tuzicms · tuzicms20 Eyl 2019
- CVE-2022-2388239İzleyin
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.
KritikCVSS 9,8İstismar yokEPSS %1tuzicms · tuzicms28 Mar 2022
- CVE-2022-4699939İzleyin
Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php.
KritikCVSS 9,8İstismar yokEPSS %0tuzicms · tuzicms26 Oca 2023
- CVE-2019-1665835İzleyin
TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0tuzicms · tuzicms21 Eyl 2019
- CVE-2019-1665935İzleyin
TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.
YüksekCVSS 8,8İstismar yokEPSS %0tuzicms · tuzicms21 Eyl 2019
- CVE-2018-1018535İzleyin
An issue was discovered in TuziCMS v2.0.6.
YüksekCVSS 8,8İstismar yokEPSS %0tuzicms · tuzicms17 Nis 2018
- CVE-2019-1665724İzleyin
TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.
OrtaCVSS 6,1İstismar yokEPSS %0tuzicms · tuzicms21 Eyl 2019