wangl1989 kayıtları

wangl1989 üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2025-26136İstismar yok	A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.wangl1989 · mysiteforme · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,3	4 Mar 2025
36İzleyin	CVE-2024-57763İstismar yok	MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.wangl1989 · mysiteforme · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,1	—	%0,5	14 Oca 2025
36İzleyin	CVE-2024-57766İstismar yok	MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.wangl1989 · mysiteforme · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,1	—	%0,5	14 Oca 2025
36İzleyin	CVE-2024-57764İstismar yok	MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.wangl1989 · mysiteforme · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,1	—	%0,5	14 Oca 2025
34İzleyin	CVE-2024-57767İstismar yok	MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.wangl1989 · mysiteforme · CWE-918 Kimlik doğrulamasız SSRF	Yüksek8,6	—	%0,4	14 Oca 2025
30İzleyin	CVE-2022-29309İstismar yok	mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.wangl1989 · mysiteforme · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%0,9	23 May 2022
30İzleyin	CVE-2024-57762İstismar yok	MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.wangl1989 · mysiteforme · CWE-502 Kimlik doğrulamasız Deserializasyon	Yüksek7,5	—	%0,5	14 Oca 2025
30İzleyin	CVE-2024-57765İstismar yok	MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.wangl1989 · mysiteforme · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,4	14 Oca 2025
26İzleyin	CVE-2021-46027İstismar yok	mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management.wangl1989 · mysiteforme · CWE-352 Kimlik doğrulamasız CSRF	Orta6,5	—	%0,4	19 Oca 2022
21İzleyin	CVE-2024-13136İstismar yok	wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserializationwangl1989 · mysiteforme · CWE-20 Deserializasyon	Orta5,3	—	%0,6	5 Oca 2025
21İzleyin	CVE-2024-13139İstismar yok	wangl1989 mysiteforme FileController doContent server-side request forgerywangl1989 · mysiteforme · CWE-918 SSRF	Orta5,3	—	%0,5	5 Oca 2025
21İzleyin	CVE-2021-46026İstismar yok	mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background bwangl1989 · mysiteforme · CWE-79 XSS	Orta5,4	—	%0,4	19 Oca 2022
20İzleyin	CVE-2024-13138İstismar yok	wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted uploadwangl1989 · mysiteforme · CWE-284 Dosya yükleme Erişim denetimi (IDOR)	Orta5,1	—	%0,4	5 Oca 2025
20İzleyin	CVE-2024-13137İstismar yok	wangl1989 mysiteforme SiteController RestResponse cross site scriptingwangl1989 · mysiteforme · CWE-79 XSS	Orta5,1	—	%0,3	5 Oca 2025

CVE-2025-26136
39İzleyin
A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
wangl1989 · mysiteforme4 Mar 2025
CVE-2024-57763
36İzleyin
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
wangl1989 · mysiteforme14 Oca 2025
CVE-2024-57766
36İzleyin
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
wangl1989 · mysiteforme14 Oca 2025
CVE-2024-57764
36İzleyin
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
wangl1989 · mysiteforme14 Oca 2025
CVE-2024-57767
34İzleyin
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
wangl1989 · mysiteforme14 Oca 2025
CVE-2022-29309
30İzleyin
mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
wangl1989 · mysiteforme23 May 2022
CVE-2024-57762
30İzleyin
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
wangl1989 · mysiteforme14 Oca 2025
CVE-2024-57765
30İzleyin
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
wangl1989 · mysiteforme14 Oca 2025
CVE-2021-46027
26İzleyin
mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management.
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wangl1989 · mysiteforme19 Oca 2022
CVE-2024-13136
21İzleyin
wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization
OrtaCVSS 5,3İstismar yokEPSS %0
- Deserializasyon
wangl1989 · mysiteforme5 Oca 2025
CVE-2024-13139
21İzleyin
wangl1989 mysiteforme FileController doContent server-side request forgery
OrtaCVSS 5,3İstismar yokEPSS %0
- SSRF
wangl1989 · mysiteforme5 Oca 2025
CVE-2021-46026
21İzleyin
mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background b
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
wangl1989 · mysiteforme19 Oca 2022
CVE-2024-13138
20İzleyin
wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %0
- Dosya yükleme
- Erişim denetimi (IDOR)
wangl1989 · mysiteforme5 Oca 2025
CVE-2024-13137
20İzleyin
wangl1989 mysiteforme SiteController RestResponse cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
wangl1989 · mysiteforme5 Oca 2025