Ulicms kayıtları
ulicms üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2023-53914İstismar yok | UliCMS 2023.1 Authentication Bypass via Mass Assignment Vulnerabilityulicms · ulicms · CWE-639 | Kritik9,3 | — | %0,7 | 17 Ara 2025 |
37İzleyin | CVE-2023-53923İstismar yok | UliCMS 2023.1 Privilege Escalation via Unauthenticated Admin Account Creationulicms · ulicms · CWE-862 | Kritik9,3 | — | %0,6 | 17 Ara 2025 |
34İzleyin | CVE-2023-53924İstismar yok | UliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Uploadulicms · ulicms · CWE-434 | Yüksek8,7 | — | %0,9 | 17 Ara 2025 |
25İzleyin | CVE-2019-11398Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTMulicms · ulicms · CWE-79 | Orta6,1 | — | %3,5 | 8 May 2019 |
24İzleyin | CVE-2020-12704Kavram kanıtı | UliCMS before 2020.2 has PageController stored XSS.ulicms · ulicms · CWE-79 | Orta6,1 | — | %1,2 | 7 May 2020 |
24İzleyin | CVE-2020-12703İstismar yok | UliCMS before 2020.2 has XSS during PackageController uninstall.ulicms · ulicms · CWE-79 | Orta6,1 | — | %0,6 | 7 May 2020 |
20İzleyin | CVE-2023-53925İstismar yok | UliCMS 2023.1 Stored Cross-Site Scripting via SVG File Uploadulicms · ulicms · CWE-79 | Orta5,1 | — | %0,4 | 17 Ara 2025 |
- CVE-2023-5391437İzleyin
UliCMS 2023.1 Authentication Bypass via Mass Assignment Vulnerability
KritikCVSS 9,3İstismar yokEPSS %1ulicms · ulicms17 Ara 2025
- CVE-2023-5392337İzleyin
UliCMS 2023.1 Privilege Escalation via Unauthenticated Admin Account Creation
KritikCVSS 9,3İstismar yokEPSS %1ulicms · ulicms17 Ara 2025
- CVE-2023-5392434İzleyin
UliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Upload
YüksekCVSS 8,7İstismar yokEPSS %1ulicms · ulicms17 Ara 2025
- CVE-2019-1139825İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTM
OrtaCVSS 6,1Kavram kanıtıEPSS %3ulicms · ulicms8 May 2019
- CVE-2020-1270424İzleyin
UliCMS before 2020.2 has PageController stored XSS.
OrtaCVSS 6,1Kavram kanıtıEPSS %1ulicms · ulicms7 May 2020
- CVE-2020-1270324İzleyin
UliCMS before 2020.2 has XSS during PackageController uninstall.
OrtaCVSS 6,1İstismar yokEPSS %1ulicms · ulicms7 May 2020
- CVE-2023-5392520İzleyin
UliCMS 2023.1 Stored Cross-Site Scripting via SVG File Upload
OrtaCVSS 5,1İstismar yokEPSS %0ulicms · ulicms17 Ara 2025