wcms kayıtları

wcms üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
45Planlayın	CVE-2023-31689İstismar yok	In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parwcms · wcms · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%20,2	22 May 2023
40Planlayın	CVE-2020-19902İstismar yok	Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php wcms · wcms · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%1,9	27 Haz 2023
36İzleyin	CVE-2019-11377İstismar yok	wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension awcms · wcms · CWE-434 Dosya yükleme	Yüksek8,8	—	%1,7	20 Nis 2019
35İzleyin	CVE-2020-24136İstismar yok	Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename pwcms · wcms · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,6	—	%2,2	7 Nis 2021
33İzleyin	CVE-2020-24140İstismar yok	Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application viawcms · wcms · CWE-918 Kimlik doğrulamasız SSRF	Yüksek8,3	—	%1,2	7 Nis 2021
33İzleyin	CVE-2020-24139İstismar yok	Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application viwcms · wcms · CWE-918 Kimlik doğrulamasız SSRF	Yüksek8,3	—	%1,1	7 Nis 2021
32İzleyin	CVE-2019-14240İstismar yok	WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URwcms · wcms · CWE-22 Kimlik doğrulamasız Yol geçişi CSRF	Yüksek8,1	—	%0,8	23 Tem 2019
27İzleyin	CVE-2025-3800İstismar yok	WCMS AnonymousController.php sql injectionwcms · wcms · CWE-74 Kimlik doğrulamasız SQL enjeksiyonu	Orta6,9	—	%0,6	19 Nis 2025
27İzleyin	CVE-2025-3799İstismar yok	WCMS AnonymousController.php sql injectionwcms · wcms · CWE-74 Kimlik doğrulamasız SQL enjeksiyonu	Orta6,9	—	%0,5	19 Nis 2025
25İzleyin	CVE-2025-5149İstismar yok	WCMS Login getallcon getMemberByUid improper authenticationwcms · wcms · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Orta6,3	—	%0,6	25 May 2025
24İzleyin	CVE-2020-24138İstismar yok	Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML via the pagename parawcms · wcms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	7 Nis 2021
24İzleyin	CVE-2020-24135İstismar yok	A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web scrwcms · wcms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	7 Nis 2021
21İzleyin	CVE-2020-24137İstismar yok	Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via wcms · wcms · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,3	—	%1,4	7 Nis 2021
21İzleyin	CVE-2024-8875İstismar yok	vedees wcms finder.php path traversalwcms · wcms · CWE-22 Yol geçişi	Orta5,3	—	%0,9	15 Eyl 2024
21İzleyin	CVE-2025-2978İstismar yok	WCMS Article Publishing Page CKEditor unrestricted uploadwcms · wcms · CWE-284 Dosya yükleme Erişim denetimi (IDOR)	Orta5,3	—	%0,5	31 Mar 2025
20İzleyin	CVE-2025-3798İstismar yok	WCMS Advertisement Image AdvadminController.php sub unrestricted uploadwcms · wcms · CWE-284 Dosya yükleme Erişim denetimi (IDOR)	Orta5,1	—	%0,5	19 Nis 2025
19İzleyin	CVE-2025-2979İstismar yok	WCMS Registration setregister cross site scriptingwcms · wcms · CWE-79 XSS	Orta4,8	—	%0,4	31 Mar 2025

CVE-2023-31689
45Planlayın
In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish par
KritikCVSS 9,8İstismar yokEPSS %20
- pre-auth RCE
- Dosya yükleme
wcms · wcms22 May 2023
CVE-2020-19902
40Planlayın
Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.php
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Yol geçişi
wcms · wcms27 Haz 2023
CVE-2019-11377
36İzleyin
wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension a
YüksekCVSS 8,8İstismar yokEPSS %2
- Dosya yükleme
wcms · wcms20 Nis 2019
CVE-2020-24136
35İzleyin
Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename p
YüksekCVSS 8,6İstismar yokEPSS %2
- Kimlik doğrulamasız
- Yol geçişi
wcms · wcms7 Nis 2021
CVE-2020-24140
33İzleyin
Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via
YüksekCVSS 8,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
wcms · wcms7 Nis 2021
CVE-2020-24139
33İzleyin
Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application vi
YüksekCVSS 8,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
wcms · wcms7 Nis 2021
CVE-2019-14240
32İzleyin
WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html UR
YüksekCVSS 8,1İstismar yokEPSS %1
wcms · wcms23 Tem 2019
CVE-2025-3800
27İzleyin
WCMS AnonymousController.php sql injection
OrtaCVSS 6,9İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
wcms · wcms19 Nis 2025
CVE-2025-3799
27İzleyin
WCMS AnonymousController.php sql injection
OrtaCVSS 6,9İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
wcms · wcms19 Nis 2025
CVE-2025-5149
25İzleyin
WCMS Login getallcon getMemberByUid improper authentication
OrtaCVSS 6,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wcms · wcms25 May 2025
CVE-2020-24138
24İzleyin
Cross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject arbitrary web script and HTML via the pagename para
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
wcms · wcms7 Nis 2021
CVE-2020-24135
24İzleyin
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows remote attackers to inject arbitrary web scr
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
wcms · wcms7 Nis 2021
CVE-2020-24137
21İzleyin
Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
wcms · wcms7 Nis 2021
CVE-2024-8875
21İzleyin
vedees wcms finder.php path traversal
OrtaCVSS 5,3İstismar yokEPSS %1
- Yol geçişi
wcms · wcms15 Eyl 2024
CVE-2025-2978
21İzleyin
WCMS Article Publishing Page CKEditor unrestricted upload
OrtaCVSS 5,3İstismar yokEPSS %1
- Dosya yükleme
- Erişim denetimi (IDOR)
wcms · wcms31 Mar 2025
CVE-2025-3798
20İzleyin
WCMS Advertisement Image AdvadminController.php sub unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %0
- Dosya yükleme
- Erişim denetimi (IDOR)
wcms · wcms19 Nis 2025
CVE-2025-2979
19İzleyin
WCMS Registration setregister cross site scripting
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
wcms · wcms31 Mar 2025