İçeriğe atla
Noroxi

xibosignage kayıtları

xibosignage üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%72,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2023-33177
    37İzleyin

    Xibo CMS vulnerable to Remote Code Execution through Zip Slip

    YüksekCVSS 8,8Kavram kanıtıEPSS %7

    xibosignage · xibo30 May 2023

  • CVE-2024-29022
    35İzleyin

    Session Hijacking via XSS attack in header and session grid in Xibo CMS

    YüksekCVSS 8,8İstismar yokEPSS %0

    xibosignage · xibo-cms12 Nis 2024

  • CVE-2024-41802
    32İzleyin

    Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import

    YüksekCVSS 8,1İstismar yokEPSS %0

    xibosignage · xibo30 Tem 2024

  • CVE-2026-31952
    32İzleyin

    Xibo CMS API has SQL Injection via DataSet Filter Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    xibosignage · xibo24 Nis 2026

  • CVE-2013-4887
    30İzleyin

    SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the dis

    YüksekCVSS 7,5İstismar yokEPSS %1

    xibosignage · xibo29 Oca 2014

  • CVE-2025-62369
    28İzleyin

    Xibo CMS: Remote Code Execution through module templates

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    xibosignage · xibo4 Kas 2025

  • CVE-2024-29023
    28İzleyin

    Session Hijacking via token exposure on the session page in Xibo CMS

    YüksekCVSS 7,2İstismar yokEPSS %0

    xibosignage · xibo-cms12 Nis 2024

  • CVE-2013-4889
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the a

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    xibosignage · xibo29 Oca 2014

  • CVE-2023-33178
    26İzleyin

    Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter

    OrtaCVSS 6,5İstismar yokEPSS %0

    xibosignage · xibo30 May 2023

  • CVE-2023-33179
    26İzleyin

    Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter

    OrtaCVSS 6,5İstismar yokEPSS %0

    xibosignage · xibo30 May 2023

  • CVE-2023-33180
    26İzleyin

    Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map

    OrtaCVSS 6,5İstismar yokEPSS %0

    xibosignage · xibo30 May 2023

  • CVE-2024-41944
    26İzleyin

    Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report

    OrtaCVSS 6,5İstismar yokEPSS %0

    xibosignage · xibo-cms30 Tem 2024

  • CVE-2024-41804
    26İzleyin

    Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula

    OrtaCVSS 6,5İstismar yokEPSS %0

    xibosignage · xibo30 Tem 2024

  • CVE-2013-5979
    25İzleyin

    Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary

    OrtaCVSS 5,0Kavram kanıtıEPSS %18

    xibosignage · xibo2 Eki 2013

  • CVE-2023-33181
    21İzleyin

    Sensitive Information Disclosure abusing Stack Trace in Xibo CMS

    OrtaCVSS 5,3İstismar yokEPSS %0

    xibosignage · xibo30 May 2023

  • CVE-2024-43412
    21İzleyin

    Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS

    OrtaCVSS 5,4İstismar yokEPSS %0

    xibosignage · xibo3 Eyl 2024

  • CVE-2026-31953
    21İzleyin

    Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login

    OrtaCVSS 5,4İstismar yokEPSS %0

    xibosignage · xibo24 Nis 2026

  • CVE-2024-41803
    19İzleyin

    Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter

    OrtaCVSS 4,9İstismar yokEPSS %0

    xibosignage · xibo30 Tem 2024

  • CVE-2026-31955
    19İzleyin

    Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality

    OrtaCVSS 4,9İstismar yokEPSS %0

    xibosignage · xibo24 Nis 2026

  • CVE-2024-43413
    19İzleyin

    Xibo CMS XSS vulnerability using DataSet HTML columns

    OrtaCVSS 4,8İstismar yokEPSS %0

    xibosignage · xibo3 Eyl 2024

  • CVE-2013-4888
    17İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script o

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    xibosignage · xibo29 Oca 2014

  • CVE-2026-31956
    17İzleyin

    Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization

    OrtaCVSS 4,3İstismar yokEPSS %0

    xibosignage · xibo24 Nis 2026