x2engine kayıtları

x2engine üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

15 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2013-5692Kavram kanıtı	Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary lx2engine · x2crm · CWE-22 RCE Yol geçişi	Yüksek8,5	—	%5,8	30 Eyl 2013
36İzleyin	CVE-2014-2664İstismar yok	Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in x2engine · x2crm · CWE-434 RCE Dosya yükleme	Yüksek8,8	—	%2,9	17 Eki 2017
32İzleyin	CVE-2015-5074Kavram kanıtı	Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php in X2Engine X2CRM bex2engine · x2crm · CWE-20 pre-auth RCE	Yüksek7,5	—	%7,5	29 Eyl 2015
31İzleyin	CVE-2014-5297İstismar yok	The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conducx2engine · x2engine · CWE-94 pre-auth RCE SSRF	Yüksek7,5	—	%2,7	9 Eki 2014
28İzleyin	CVE-2015-5075Kavram kanıtı	Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of adminisx2engine · x2crm · CWE-352 Kimlik doğrulamasız CSRF	Orta6,8	—	%2,8	29 Eyl 2015
24İzleyin	CVE-2020-21087İstismar yok	Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web scrx2engine · x2crm · CWE-79 pre-auth RCE XSS	Orta6,1	—	%1,4	14 Nis 2021
24İzleyin	CVE-2021-27288İstismar yok	Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script x2engine · x2crm · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	14 Nis 2021
22İzleyin	CVE-2022-48178Kavram kanıtı	X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action fux2engine · x2crm · CWE-79 XSS	Orta5,4	—	%1,8	14 Nis 2023
22İzleyin	CVE-2022-48177Kavram kanıtı	X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importMox2engine · x2crm · CWE-79 XSS	Orta5,4	—	%1,8	14 Nis 2023
21İzleyin	CVE-2014-5298İstismar yok	FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upx2engine · x2engine · CWE-264 Kimlik doğrulamasız Dosya yükleme Hizmet dışı bırakma	Orta5,0	—	%3,0	9 Eki 2014
21İzleyin	CVE-2024-48120Kavram kanıtı	X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module.x2engine · x2crm · CWE-79 XSS	Orta5,4	—	%0,7	14 Eki 2024
21İzleyin	CVE-2021-33853İstismar yok	A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a trux2engine · x2crm · CWE-79 RCE XSS	Orta5,4	—	%0,6	16 Mar 2022
19İzleyin	CVE-2020-21088İstismar yok	Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary wx2engine · x2crm · CWE-79 XSS	Orta4,8	—	%0,8	14 Nis 2021
18İzleyin	CVE-2013-5693Kavram kanıtı	Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via thex2engine · x2crm · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%3,2	30 Eyl 2013
18İzleyin	CVE-2015-5076İstismar yok	Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arbitrary web script or x2engine · x2crm · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,9	29 Eyl 2015

CVE-2013-5692
36İzleyin
Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary l
YüksekCVSS 8,5Kavram kanıtıEPSS %6
- RCE
- Yol geçişi
x2engine · x2crm30 Eyl 2013
CVE-2014-2664
36İzleyin
Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in
YüksekCVSS 8,8İstismar yokEPSS %3
- RCE
- Dosya yükleme
x2engine · x2crm17 Eki 2017
CVE-2015-5074
32İzleyin
Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php in X2Engine X2CRM be
YüksekCVSS 7,5Kavram kanıtıEPSS %8
- pre-auth RCE
x2engine · x2crm29 Eyl 2015
CVE-2014-5297
31İzleyin
The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 through 4.1.7 allows remote attackers to conduc
YüksekCVSS 7,5İstismar yokEPSS %3
- pre-auth RCE
- SSRF
x2engine · x2engine9 Eki 2014
CVE-2015-5075
28İzleyin
Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authentication of adminis
OrtaCVSS 6,8Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- CSRF
x2engine · x2crm29 Eyl 2015
CVE-2020-21087
24İzleyin
Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web scr
OrtaCVSS 6,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
x2engine · x2crm14 Nis 2021
CVE-2021-27288
24İzleyin
Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
x2engine · x2crm14 Nis 2021
CVE-2022-48178
22İzleyin
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action fu
OrtaCVSS 5,4Kavram kanıtıEPSS %2
- XSS
x2engine · x2crm14 Nis 2023
CVE-2022-48177
22İzleyin
X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importMo
OrtaCVSS 5,4Kavram kanıtıEPSS %2
- XSS
x2engine · x2crm14 Nis 2023
CVE-2014-5298
21İzleyin
FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the up
OrtaCVSS 5,0İstismar yokEPSS %3
x2engine · x2engine9 Eki 2014
CVE-2024-48120
21İzleyin
X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module.
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- XSS
x2engine · x2crm14 Eki 2024
CVE-2021-33853
21İzleyin
A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a tru
OrtaCVSS 5,4İstismar yokEPSS %1
- RCE
- XSS
x2engine · x2crm16 Mar 2022
CVE-2020-21088
19İzleyin
Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary w
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
x2engine · x2crm14 Nis 2021
CVE-2013-5693
18İzleyin
Cross-site scripting (XSS) vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- XSS
x2engine · x2crm30 Eyl 2013
CVE-2015-5076
18İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arbitrary web script or
OrtaCVSS 4,3İstismar yokEPSS %2
- Kimlik doğrulamasız
- XSS
x2engine · x2crm29 Eyl 2015