verydows kayıtları
verydows üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2019-7737İstismar yok | A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.verydows · verydows · CWE-352 | Yüksek8,8 | — | %0,7 | 11 Şub 2019 |
35İzleyin | CVE-2020-23363İstismar yok | Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code viverydows · verydows · CWE-352 | Yüksek8,8 | — | %0,4 | 9 May 2023 |
35İzleyin | CVE-2023-51949İstismar yok | Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controllerverydows · verydows · CWE-352 | Yüksek8,8 | — | %0,3 | 12 Oca 2024 |
32İzleyin | CVE-2022-28058İstismar yok | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.verydows · verydows · CWE-22 | Yüksek8,1 | — | %1,2 | 26 Nis 2022 |
32İzleyin | CVE-2022-28059İstismar yok | Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.verydows · verydows · CWE-22 | Yüksek8,1 | — | %1,2 | 26 Nis 2022 |
24İzleyin | CVE-2019-8363İstismar yok | Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.verydows · verydows · CWE-79 | Orta6,1 | — | %0,8 | 16 Şub 2019 |
24İzleyin | CVE-2019-7753İstismar yok | Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.verydows · verydows · CWE-79 | Orta6,1 | — | %0,8 | 12 Şub 2019 |
- CVE-2019-773735İzleyin
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.
YüksekCVSS 8,8İstismar yokEPSS %1verydows · verydows11 Şub 2019
- CVE-2020-2336335İzleyin
Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code vi
YüksekCVSS 8,8İstismar yokEPSS %0verydows · verydows9 May 2023
- CVE-2023-5194935İzleyin
Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller
YüksekCVSS 8,8İstismar yokEPSS %0verydows · verydows12 Oca 2024
- CVE-2022-2805832İzleyin
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.
YüksekCVSS 8,1İstismar yokEPSS %1verydows · verydows26 Nis 2022
- CVE-2022-2805932İzleyin
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.
YüksekCVSS 8,1İstismar yokEPSS %1verydows · verydows26 Nis 2022
- CVE-2019-836324İzleyin
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.
OrtaCVSS 6,1İstismar yokEPSS %1verydows · verydows16 Şub 2019
- CVE-2019-775324İzleyin
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.
OrtaCVSS 6,1İstismar yokEPSS %1verydows · verydows12 Şub 2019