wang.market kayıtları
wang.market üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-284 Improper Access Control1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-26813İstismar yok | SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.wang.market · wangmarket · CWE-89 | Kritik9,8 | — | %0,9 | 28 Nis 2023 |
39İzleyin | CVE-2023-6886İstismar yok | xnx3 wangmarket Role Management Page code injectionwang.market · wangmarket · CWE-94 | Kritik9,8 | — | %0,8 | 16 Ara 2023 |
32İzleyin | CVE-2025-25769İstismar yok | Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.wang.market · wangmarket · CWE-352 | Yüksek8,0 | — | %0,1 | 21 Şub 2025 |
27İzleyin | CVE-2025-25770İstismar yok | Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.wang.market · wangmarket · CWE-352 | Orta6,8 | — | %0,2 | 21 Şub 2025 |
8İzleyin | CVE-2025-15415İstismar yok | xnx3 wangmarket XML File uploadImage.do uploadImage unrestricted uploadwang.market · wangmarket · CWE-284 | Düşük2,0 | — | %0,2 | 1 Oca 2026 |
7İzleyin | CVE-2025-15451İstismar yok | xnx3 wangmarket System Variables variableSave.do cross site scriptingwang.market · wangmarket · CWE-79 | Düşük1,9 | — | %0,2 | 5 Oca 2026 |
7İzleyin | CVE-2025-15452İstismar yok | xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scriptingwang.market · wangmarket · CWE-79 | Düşük1,9 | — | %0,2 | 5 Oca 2026 |
7İzleyin | CVE-2025-15416İstismar yok | xnx3 wangmarket Add Global Variable save.do cross site scriptingwang.market · wangmarket · CWE-79 | Düşük1,9 | — | %0,2 | 1 Oca 2026 |
- CVE-2023-2681339İzleyin
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.
KritikCVSS 9,8İstismar yokEPSS %0wang.market · wangmarket28 Nis 2023
- CVE-2023-688639İzleyin
xnx3 wangmarket Role Management Page code injection
KritikCVSS 9,8İstismar yokEPSS %0wang.market · wangmarket16 Ara 2023
- CVE-2025-2576932İzleyin
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
YüksekCVSS 8,0İstismar yokEPSS %0wang.market · wangmarket21 Şub 2025
- CVE-2025-2577027İzleyin
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
OrtaCVSS 6,8İstismar yokEPSS %0wang.market · wangmarket21 Şub 2025
- CVE-2025-154158İzleyin
xnx3 wangmarket XML File uploadImage.do uploadImage unrestricted upload
DüşükCVSS 2,0İstismar yokEPSS %0wang.market · wangmarket1 Oca 2026
- CVE-2025-154517İzleyin
xnx3 wangmarket System Variables variableSave.do cross site scripting
DüşükCVSS 1,9İstismar yokEPSS %0wang.market · wangmarket5 Oca 2026
- CVE-2025-154527İzleyin
xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scripting
DüşükCVSS 1,9İstismar yokEPSS %0wang.market · wangmarket5 Oca 2026
- CVE-2025-154167İzleyin
xnx3 wangmarket Add Global Variable save.do cross site scripting
DüşükCVSS 1,9İstismar yokEPSS %0wang.market · wangmarket1 Oca 2026